OpenSAML user discussion

["Scott Cantor" <>]

> I suppose you haven't seen much demand for enveloping signature?

Our entire reason for this project relates to the difficulty of handling
signatures in the context of existing content that needs to be signed, using
the tools that exist (xml-security alone, Axis, JAXB etc.) If they worked
well, we wouldn't have needed most of OpenSAML, and certainly most of the
xmltooling work.

To "support" enveloping signatures, we'd essentially have to do an XML
Security library ourselves, which wasn't really the point. If you need
enveloping, using xml-security directly would be more sensible (and you
could marshall any XMLObject into a DOM that could be attached to an Apache
or Java Signature object).

-- Scott