[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[KEYPROV] W3C XML Dsig recommendation on defaults
http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/
"If the Signature includes same-document references, [XML] or [XML-schema]
validation of the document might introduce changes that break the signature.
Consequently, applications should be careful to consistently process the document
or refrain from using external contributions (e.g., defaults and entities)"
If WGLC has not passed I would drop defaults from the PSKC schema or
require "writers" to always create default-free output.
Anders