Re: [wss] PasswordDigest in Username profile

> I believe the output of SHA-1 is the function's complete state
> at the end of processing an input stream.
...
If that's true, then you're right about putting the password first.  Thanks.
		/r$


Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
XML Security Overview  http://www.datapower.com/xmldev/xmlsecurity.html