XAdES - More secure than XML Dsig?

• From: Anders Rundgren <anders.rundgren@telia.com>
• Date: Wed, 10 Mar 2004 14:36:53 +0100
• To: <w3c-ietf-xmldsig@w3.org>
• Message-ID: <00f401c406a4$c0d2cc20$0500a8c0@arport>

According to some users of XAdES, it is more secure
as you also sign the hash of the signer's certificate in
order to thwart changing this element.

Any thoughts on why this presumably good solution
is not a part of XML Dsig?

thanx
Anders Rundgren

Received on Wednesday, 10 March 2004 08:44:01 UTC