[xmlsec] Including comments in signatures
olavmo at stud.ntnu.no
Mon Jul 7 09:00:25 PDT 2008
On Mon, Jul 07, 2008 at 08:03:43 -0700, Aleksey Sanin wrote:
> Well, this is one of the "dark corners" of the XMLDSig spec...
> From http://www.w3.org/TR/xmldsig-core/
> Identifies the node-set (minus any comment nodes) of the
> XML resource containing the signature
> Thus, the comments are removed even before you get to the c14n.
> You can workaround this by using the following reference URI:
> <Reference URI="#xpointer(/)">
Thanks for the explanation!
More information about the xmlsec