>On 11/24/14, 6:07 PM, "SM" <[email protected]> wrote: >> >>Does Santuario support signing and verifying references which are not >>files but streams? In other words, is there a way to specify that a >>DSIGReference is not pointing to a physical file and must be read as an >>input stream while signing/verifying?
And actually more precisely answering what you asked, a DSIGReference almost never points at a file/resource. It can, if it's a detached signature, but the normal cases are enveloped or enveloping, where the signature and what's signed are in the same document. Referencing in DSIG is very complex and requires a long time to fully understand. Reading the standard is basically a must to do anything safely with it. -- Scott
