W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > July to September 2002

RE: Need to C14N a reference before computing the digest ??

From: Dournaee, Blake <bdournaee@rsasecurity.com>
Date: Tue, 27 Aug 2002 17:09:59 -0700
Message-ID: <E7B6CB80230AD31185AD0008C7EBC4D2041D68FA@exrsa01.rsa.com>
To: "'Christian Geuer-Pollmann'" <geuer-pollmann@nue.et-inf.uni-siegen.de>, "???(Nathan Wu)" <nathan.wu@email.chinatrust.com.tw>, w3c-ietf-xmldsig@w3.org

Nathn,

In general, whether or not you apply canonicalization depends on the type of
URI and the transforms. Assuming no explicit transforms, if the URI="" or
URI="#foo" where foo is arbitrary, then you will use canonicalization to
create a canonical physical representation of the referenced resource. 

If the URI is NOT URI="" or URI="#foo", then no canonicalization occurs, the
resource is treated as octets. That is, unless there is an explicit
transform that requires the resource be interpreted as a node-set.

Regards,

Blake Dournaee
Senior Systems Engineer
RSA Security, Inc.
650-295-7548

"A mind all logic is like a knife all blade, it makes the hand bleed that
uses it."


-----Original Message-----
From: Christian Geuer-Pollmann
[mailto:geuer-pollmann@nue.et-inf.uni-siegen.de] 
Sent: Friday, August 23, 2002 3:36 AM
To: ???(Nathan Wu); w3c-ietf-xmldsig@w3.org
Subject: Re: Need to C14N a reference before computing the digest ??


--On Freitag, 23. August 2002 18:02 +0800
<nathan.wu@email.chinatrust.com.tw> wrote:

> Do we need to C14N a reference before computing the digest ??

If you have a node set and you do not "manually" c14n by an explicit
transform, the default c14n is applied which is (inclusive) c14n omitting
comments.

Christian
Received on Tuesday, 27 August 2002 20:10:04 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 20:10:10 UTC