Cart
[Home] [By Thread] [By Date] [Recent Entries]
> Well, on the bright side I guess the extreme overhead of basing DSIG and > Encryption on XPath rather than some standardized serialization of the Extreme overhead? Hardly. It's just a processing model, no more or less efficient than infoset. > I'd suspect that any reasonable implementation of c14n is actually > working at a level equivalent to the Infoset internally, anyway - it > just serializes the Infoset out following the special rules for c14n > XML. Is there any other way of handling c14n that's not equivalent to this? You can do a SAX-based C14N. If you think that's infoset, then I guess my point is proved that the infoset is so general that it's useful for security. :) /r$ -- Rich Salz, Chief Security Architect DataPower Technology http://www.datapower.com XS40 XML Security Gateway http://www.datapower.com/products/xs40.html XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
|
