Re: [wss] SwA timing

[Rich Salz <rsalz@datapower.com>]

> 1. Does anyone have a pressing need to secure headers at this time?

Sorry for the late response.

Signing headers could always be supported later on by defining a 
transform that specified which headers to sign.  For example:
	<ds:Reference URI="cid:part1";>
            <ds:Transforms>
               <ds:Transform>
                 <xxx:SignedHeaders>
                     <Header>Content-Length</Header>
                     <Header>SOAPAction</Header>
                 </xxx:SignedHeaders>
               </ds:Transform>
            </ds:Transforms>
            ...




-- 
Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
XML Security Overview  http://www.datapower.com/xmldev/xmlsecurity.html