[xmlsec] Including comments in signatures

[Olav Morken]

On Mon, Jul 07, 2008 at 08:03:43 -0700, Aleksey Sanin wrote:
> Hello!
> 
> Well, this is one of the "dark corners" of the XMLDSig spec...
> 
> From http://www.w3.org/TR/xmldsig-core/
> 
>   URI=""
>     Identifies the node-set (minus any comment nodes) of the
>     XML resource containing the signature
> 
> Thus, the comments are removed even before you get to the c14n.
> You can workaround this by using the following reference URI:
> 
> <Reference URI="#xpointer(/)">

Thanks for the explanation!

-- 
Olav Morken