[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[KEYPROV] W3C XML Dsig recommendation on defaults



http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/

"If the Signature includes same-document references, [XML] or [XML-schema]
 validation of the document might introduce changes that break the signature.
 Consequently, applications should be careful to consistently process the document
 or refrain from using external contributions (e.g., defaults and entities)"

If WGLC has not passed I would drop defaults from the PSKC schema or
require "writers" to always create default-free output.

Anders