Dan Weinreb wrote:
<snip/>
>
> I have not yet managed to fully comprehend the XMLDSIG spec. There
> isn't, by any chance, a way to use XMLDSIG solely for creating and
> transmitting a message digest, without any digital signature? If
> there were, we could
>
>
--
Require message digests on those messages that are unsigned
Don't think we can go this far. We can recommend it, but we cannot
require it.
>
--
Recommend message digests, ditto, ditto.
We can do this as well. Digests are easy to calculate. We could
and possibly should provide a means for accommodating a digest
value as a separate header. We could easily steal from DSig for this.
>
>
----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
