XML Encryption issues that I noted.

1. Can we write one schema that permits portions to be encrypted, or must we 
write as many schema as possible varied encrypted instances, or must the XML 
instance be well-formed only?
2. Signed and Encrypting: Sign then Encrypt. (Is the Encryption subject 
signed as well: Sign/Encrypt/Sign?)
3. Which way does the reference between the KeyInfo and the EncryptedContent 
point?
4. Philosophical/Design Issue: we should not have any expectation that we 
will be able to tell people how to write their schema with respect to 
Encryption.
5. Canonicalization?: How heavy need it be? Must we worry about namespace 
context? A binary canonical form has the potential of being efficient, need 
it be XML? Compression ...



_________________________________________________________
Joseph Reagle Jr.
W3C Policy Analyst                mailto:reagle@w3.org
IETF/W3C XML-Signature Co-Chair   http://www.w3.org/People/Reagle/

Received on Friday, 25 August 2000 18:10:53 UTC