> That makes sense, and is nice and simple. I had imagined these tools
> were more advanced! I guess this means not many people are using
> canonicalizers commercially.
No, it means that not many people have Elliotte's direct need.
Anytime someone does XML DSIG, they are using canonicalization, but most
often they are fed right into a SHA-1 processor, and not output directly.
/r$
--
Rich Salz, Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
