>> If all of the document is to be signed, all files within the archive, excepting files contained within the META-INF folder, shall be contained within the signature by creating a Reference element for each as defined in [xmldsig]. The manifest.xml file within the META-INF folder shall be signed. Other files within the META-INF folder may be signed.
>David this is a comprehensive proposal in a short time. Nice work. I like it.
Thanks very much - perhaps those many hours writing MS-OFFCRYPTO will turn out to have some benefit outside that document. I'd very much like to get to a point where we can get signing into the standard so that I can work toward getting it implemented in our apps.