> The killer is the c14n. For our use we don't actually need full-c14n, we just need to be sure that the hash we get when the > > document is sent will be the same as that when it's received, despite having passed through one or more XML processors. > We could have used compression (basically turn the XML into binary that the intermediate processors couldn't/wouldn't >mess with) but decided in the end not to.
Is there something wrong with org.apache.xml.security.utils.XMLUtils.outputDOMc14nWithComments() because it doesn´t consume so so much memory .....