RE: Need to C14N a reference before computing the digest ??

Nathn,

In general, whether or not you apply canonicalization depends on the type of
URI and the transforms. Assuming no explicit transforms, if the URI="" or
URI="#foo" where foo is arbitrary, then you will use canonicalization to
create a canonical physical representation of the referenced resource. 

If the URI is NOT URI="" or URI="#foo", then no canonicalization occurs, the
resource is treated as octets. That is, unless there is an explicit
transform that requires the resource be interpreted as a node-set.

Regards,

Blake Dournaee
Senior Systems Engineer
RSA Security, Inc.
650-295-7548

"A mind all logic is like a knife all blade, it makes the hand bleed that
uses it."


-----Original Message-----
From: Christian Geuer-Pollmann
[mailto:geuer-pollmann@nue.et-inf.uni-siegen.de] 
Sent: Friday, August 23, 2002 3:36 AM
To: ???(Nathan Wu); w3c-ietf-xmldsig@w3.org
Subject: Re: Need to C14N a reference before computing the digest ??


--On Freitag, 23. August 2002 18:02 +0800
<nathan.wu@email.chinatrust.com.tw> wrote:

> Do we need to C14N a reference before computing the digest ??

If you have a node set and you do not "manually" c14n by an explicit
transform, the default c14n is applied which is (inclusive) c14n omitting
comments.

Christian

Received on Tuesday, 27 August 2002 20:10:04 UTC