SwA Profile Comments

Frederick,

Here are some more comments from our engineers on the latest SwA Profile
Draft:

1) Insignificant whitespace in MIME headers should probably be stripped
rather than compressed during canonicalization.  The current
specification allows either one or zero space character to appear
between every header token.  This allows for many different
representations of one header.  Defining a canonical format that uses
zero insignificant spaces would remove this ambiguity.

2) MIME header parameters should probably be ordered alphabetically
during canonicalization, similar to attributes in XML canonicalization.

3)  The signature example is missing critical elements.  SignedInfo,
CanonicalizationMethod, SignatureMethod, and SignatureValue are all
missing.

Dana S. Kaufman
VP of Product Management
Forum Systems, Inc.
Tel: (781) 788-4232
E-Mail: 
Visit http://www.forumsys.com