> > I donīt need to, because, i donīt use dom neither jdom, i developed my own > > small JAXB, so I read the > > XML into my generated Java structure, > > when I need to sign some area y use, a method of the structure that prints > > the canonized XML. > > It doesn't matter you use for representing the XML. You still need to c14n > it. One bit of difference in the input and you will break your signature. > Without c14n it would be hard enough to be compatible with your own > implementation.
I read the XML, I modify it all the times I want, when I print it or save to the XML database Itīs always in c14n because the structure .toXML() canonizes it. so the signature always correspond to the saved XML. > > That's not to say that it's not worthwhile to do your own, but it's usually > not worth the trouble because of the effort involved, and it's usually > impossible to change anything without breaking it. As soon as you have to > add something you usually have to start from close to the beginnen :) I donīt get it, after I have signed it, I am not going to modify it, and before signing it I can make all the changes I need. > I'd be (pleasantly) surprised ;-) jeje, maybe.
