RE: [ebxml-msg] Signature Generation Question

Arvola,

 

You 
are right. It should be "SOAP Envelope" It was corrected in a lot of 
places

(I had 
pointed out this bug in a message some time back), but David might 
have

missed 
fixing it here. As you are aware, the reason for this change is to secure the 
contents

of the 
Manifest that are in the SOAP body as well as the SOAP 
header.

 

Regards,

-Suresh

  
-----Original Message-----
From: Arvola Chan 
  [mailto:]
Sent: Thursday, December 06, 2001 6:08 
  PM
To: 
Subject: [ebxml-msg] 
  Signature Generation Question

  
Section 4.1.3 Signature Generation, line 1068 
  states:

  
 

  
1) Creat a ds:SignedInfo element with ds:SignatureMethod, 
  ds:CanonicalizationMethod, and ds:Reference elements for the SOAP Header and 
  any required payload objects, as prescribed by [XMLDSIG].

  
 

  
Shouldn't the phrase "SOAP Header" be replaced with "SOAP 
  Envelope" instead? Don't we want to sign the SOAP Body as well?

  
 

  
Thanks,

  
-Arvola