> where I *hope* the XPath expression returns exactly the element I wanted,
> i.e. the intersection of the whole document (BaseURI, nothing else specified)
> with the Body/message portion.

I don't speak XPath, so as I said earlier, I'm not the one to ask. Conceptually 
that would be the right track, but...

> I think I could also have an identifying attribute in the <pdpa:message>,
> and replace the expression with id("nameOfIDAttr"). Which is, I think, the
> recommended way as it is faster and less error-prone (I can assume
> Schema-aware entities).

Then by all means do not use XPath. But if you use an ID, you don't need to use 
an xpointer, just set the Reference URI to "#foo" where foo is the ID. No extra 
transform needed, apart from c14n or something else like that.

> Would this be the correct way? I am asking because it is kind of difficult
> to find out what's happening inside the black box, i.e. there is no output as
> to which elements are actually being signed.

You can log it somehow, I believe.
 
-- Scott


Reply via email to