XML.orgXML.org
FOCUS AREAS |XML-DEV |XML.org DAILY NEWSLINK |REGISTRY |RESOURCES |ABOUT
OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]
RE: [xml-dev] RE: Compelling use case for XML Catalogs?

On Mon, 2011-06-13 at 11:24 -0400, Costello, Roger L. wrote:
[...]
> XML Catalog only works if: 
> 
>     - you have pre-knowledge of exactly what URLs will
>       be present in the XML (XSLT, XSD, RNG, SVG, etc.) 
>       documents that you receive/process

No. URIs that are not in the catalog file will continue to resolve as
before.

>      - the XML documents will always contain the correct 
>        URL; there will never be any accidental or malicious
>        alteration of URLs

No. This is orthogonal. If you care about the identity of resolved
resources, use digital signatures.  It would be reasonable to argue that
(1) XML catalog doesn't cater for checking signatures;
(2) XML canonicalisation and signatures is intended for entire XML
documents and instance subtrees, and not for document type declarations;
however, you could treat an external document type definition as a text
file.

Note that these issues apply to any HTTP cache mechanism, including
corporate filewalls.

Liam


-- 
Liam Quin - XML Activity Lead, W3C, http://www.w3.org/People/Quin/
Pictures from old books: http://fromoldbooks.org/



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]


News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 1993-2007 XML.org. This site is hosted by OASIS