Right, I am not at all trying to suggest it's a bug with this library. It most certainly is not.
On Tue, Dec 20, 2011 at 10:12, Cantor, Scott <canto...@osu.edu> wrote: > On 12/20/11 4:58 AM, "Colm O hEigeartaigh" <cohei...@apache.org> wrote: >> >>It is up to the application calling the signature verification code to >>ensure that ID's are unique. > > This isn't Santuario's fault, but it's the parser's job if it supports > either schema validation OR DOM 3 (the latter being the problem). Not > enforcing uniqueness on setIdAttribute is either a bug or just blatantly > silly, depending on how strictly one wants to read the spec. > > -- Scott > -- Chad La Joie www.itumi.biz trusted identities, delivered