> Larry,
>
> I understand what you're saying but canonicalisation
> and subsequent validation only happens on the
> Signature block. By moving the namespace declaration
> to the root element I have effectively removed the
> namespace from being part of the canonicalised
> representation. This would therefore invalidate the
> signature.
>
> Nick
>
No, The c14n of a part of a element in a document takes on account all the
namespace deffinition of all the parents in the document(that's way we
have inclusive & exclusive)
If you add a new namespace definition in a root element and you have
inclusive c14n your singture fails.
In exclusive c14n you also takes on account if it is visibly utilized in
the node.

Regards,

Raul
http://r-bg.com


Reply via email to