Sorry, I was not aware that was the case, because http://www.w3.org/TR/xml-c14n11 was presented to me as the URI to be used.
So, to clarify, when you say "The URL to the specs has nothing to do with the algorithm URI", you mean that http://www.w3.org/TR/xml-c14n11 is an URL to the spec that actually refers to http://www.w3.org/2006/12/xml-c14n11 (algorithm's URI)? Is this mapped somewhere? João M. S. Silva On Fri, May 24, 2019 at 4:01 PM Cantor, Scott <[email protected]> wrote: > On 5/24/19, 10:58 AM, "Sean Mullan" <[email protected]> wrote: > > > Agree, and we should remain compliant with the XML Signature spec and we > > should not change the code to use the newer URI as that would likely > > (definitely?) lead to interop issues. > > To be clear: this is no newer URI. The C14N documents predate XML > Signature 1.1, and they don't define the URIs that are used within XML > Signature itself to identify their use. The URL to the specs has nothing to > do with the algorithm URI other than by some coincidence if there is any > case where they overlap. I think the OP was just confused. > > -- Scott > > >
