> Does OASIS WSS provide the capability to include the signature
> within the SOAP body? I think we can include signature only in the SOAP
> header. If my understanding is wrong, can someone please point me to the
> section # of WSS spec to clarify this?
wss is a soap header. you can sign the whole envelope by using an
enveloped signature. beware soap 1.2; see w3c "soap normalization" note.
/r$
--
Rich Salz Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
_______________________________________________
xmlsec mailing list
[EMAIL PROTECTED]
http://www.aleksey.com/mailman/listinfo/xmlsec
