> Larry, > > I understand what you're saying but canonicalisation > and subsequent validation only happens on the > Signature block. By moving the namespace declaration > to the root element I have effectively removed the > namespace from being part of the canonicalised > representation. This would therefore invalidate the > signature. > > Nick > No, The c14n of a part of a element in a document takes on account all the namespace deffinition of all the parents in the document(that's way we have inclusive & exclusive) If you add a new namespace definition in a root element and you have inclusive c14n your singture fails. In exclusive c14n you also takes on account if it is visibly utilized in the node.
Regards, Raul http://r-bg.com