Signing external data without URL

• From: Anders Rundgren <anders.rundgren@telia.com>
• Date: Wed, 14 Jan 2004 10:49:16 +0100
• To: <w3c-ietf-xmldsig@w3.org>
• Message-ID: <015701c3da83$ad42e840$0500a8c0@arport>

I'm working with a scheme where data is external to the
signature but does not necessary be available for the
validator by an URL.

To put a single Reference pointing to a Manifest
containing a single Reference seems like a possibility
but an ugly one.

To NOT specify an URL in a Reference (turning of de-referencing)
and maybe add a static "Type" attribute seems possible but is that
recommendable (fully compliant)?

Thanx
Anders Rundgren

Received on Wednesday, 14 January 2004 04:55:49 UTC