Re: More on Atom XML signatures and encryption

[Bob Wyman]

Paul Hoffman wrote:
Same as above.  Even though it is included-by-reference, the referenced 
content is still a part of the message.
No, it isn't. The reference is part of the message.
+1
   The signature should only cover the bits that are actually in the 
element (feed or entry) that is signed. Referenced data may be under 
different administrative control, may change independently of the signed 
element, etc.

       bob wyman