[
Lists Home |
Date Index |
Thread Index
]
> Well, on the bright side I guess the extreme overhead of basing DSIG and
> Encryption on XPath rather than some standardized serialization of the
Extreme overhead? Hardly. It's just a processing model, no more or
less efficient than infoset.
> I'd suspect that any reasonable implementation of c14n is actually
> working at a level equivalent to the Infoset internally, anyway - it
> just serializes the Infoset out following the special rules for c14n
> XML. Is there any other way of handling c14n that's not equivalent to this?
You can do a SAX-based C14N. If you think that's infoset, then I guess
my point is proved that the infoset is so general that it's useful for
security. :)
/r$
--
Rich Salz, Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
|
