Subject: [KEYPROV] W3C XML Dsig recommendation on defaults

From: "Anders Rundgren" <[email-masked]>
Date: Tue, 22 Sep 2009 10:02:42 +0200

http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/

"If the Signature includes same-document references, [XML] or [XML-schema]
 validation of the document might introduce changes that break the signature.
 Consequently, applications should be careful to consistently process the document
 or refrain from using external contributions (e.g., defaults and entities)"

If WGLC has not passed I would drop defaults from the PSKC schema or
require "writers" to always create default-free output.

Anders