OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help



   Re: [xml-dev] Rich & Elliotte were right, I was wrong

[ Lists Home | Date Index | Thread Index ]

> Well, on the bright side I guess the extreme overhead of basing DSIG and 
> Encryption on XPath rather than some standardized serialization of the

Extreme overhead?  Hardly.  It's just a processing model, no more or 
less efficient than infoset.

> I'd suspect that any reasonable implementation of c14n is actually 
> working at a level equivalent to the Infoset internally, anyway - it 
> just serializes the Infoset out following the special rules for c14n 
> XML. Is there any other way of handling c14n that's not equivalent to this?

You can do a SAX-based C14N.  If you think that's infoset, then I guess 
my point is proved that the infoset is so general that it's useful for 
security. :)


Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
XML Security Overview  http://www.datapower.com/xmldev/xmlsecurity.html


News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 2001 XML.org. This site is hosted by OASIS