If I use the enveloped signature, will I be compliant with WSS?
-----Original Message----- From: Rich Salz [mailto:[EMAIL PROTECTED] Sent: Friday, June 04, 2004 2:13 PM To: Juneja, Manoj Cc: Aleksey Sanin; Erik F. Andersen; [EMAIL PROTECTED] Subject: RE: [xmlsec] Signing SOAP envelopes > Does OASIS WSS provide the capability to include the signature > within the SOAP body? I think we can include signature only in the SOAP > header. If my understanding is wrong, can someone please point me to the > section # of WSS spec to clarify this? wss is a soap header. you can sign the whole envelope by using an enveloped signature. beware soap 1.2; see w3c "soap normalization" note. /r$ -- Rich Salz Chief Security Architect DataPower Technology http://www.datapower.com XS40 XML Security Gateway http://www.datapower.com/products/xs40.html XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html _______________________________________________ xmlsec mailing list [EMAIL PROTECTED] http://www.aleksey.com/mailman/listinfo/xmlsec
