Re: Soap Message Canonicalization (SM-C14N)

I'm confused.  There's a proposal to specify what intermediaries can do
to a message.  Since this would break something from SOAP 1.1 (the
ability to sign messages), it makes sense to me that *at the same time*
we define a way to sign messages, or parts thereof. Why wait?  It's
already proven useful -- e.g., showing that we want to make sure that
intermediaries don't re-order headers. :)

I totally agree that signing some -- not all -- header elements is
important, which is why it's covered in the text.

	/r$
-- 
Zolera Systems, Securing web services (XML, SOAP, Signatures,
Encryption)
http://www.zolera.com

Received on Tuesday, 19 February 2002 19:19:57 UTC