xacml — archive

[xacml] RE: Comparing KeyInfos. Forwarded message from john howard.

From: Anne Anderson <[email protected]>
To: [email protected]
Date: Thu, 03 Oct 2002 18:19:00 -0000

------- start of forwarded message ------- From: "john howard" <[email protected]> To: <[email protected]> Subject: RE: Comparing KeyInfos Date: Thu, 3 Oct 2002 18:39:21 +0100 Anne, Thanks for the reply. I think the selected approach is the practical one at this time. Longer term there is an issue with comparing complex objects such as KeyInfo and it will not always be the case that XPath can resolve the problem. Sometimes knowledge of the object will be required. e.g. XPath will not resolve the issue were the policy holds a Certificate in it's KeyInfo and the KeyInfo in the context holds the SHA1 hash of the public key. This is a valid comparison that cannot be resolved using XPath. John.