xacml — archive

[xacml] Comparing KeyInfos. Forwarded message from john howard.

From: Anne Anderson <[email protected]>
To: [email protected]
Date: Wed, 02 Oct 2002 15:14:00 -0000

Topic for discussion. John Howard has been implementing XACML for Reuters. -Anne ------- start of forwarded message ------- From: "john howard" <[email protected]> To: <[email protected]> Subject: Comparing KeyInfos Date: Wed, 2 Oct 2002 13:04:25 +0100 Hi Anne, In a couple of the conformance tests (IIB016, 11B017) there is a requirement to compare KeyInfos. The comparison is performed as a string-match even though the data type is KeyInfo. As KeyInfos can be compared in a number of ways the string-match would appear inadequate. e.g. In the simple case <ds:KeyInfo> <ds:KeyName>jhibbert-key</ds:KeyName> </ds:KeyInfo> would not match <ds:KeyInfo> <ds:KeyName>jhibbert-key</ds:KeyName> <ds:KeyValue>....</ds:KeyValue> </ds:KeyInfo> Although the KeyInfos are the same. Is there a need for a keyinfo-match function or is there a more generic object-match that would match based on the data type and therefore be completely extendable. John. ------- end of forwarded message ------- -- Anne H. Anderson Email: [email protected] Sun Microsystems Laboratories 1 Network Drive,UBUR02-311 Tel: 781/442-0928 Burlington, MA 01803-0902 USA Fax: 781/442-1692