OpenSAML user discussion

["Scott Cantor" <>]

Mitchell Prentice wrote on 2009-07-04:
> I'm trying to understand the use of InclusiveNamespaces PrefixList in
> exclusive canonicalization.

If you're asking about how OpenSAML uses the feature, it depends on the
version and the language, they're very different in that regard.

Most of your questions are implementation-specific (and therefore not really
directed at this list). There is no "right" or "wrong" way to use the
feature, and the examples you're seeing are not intended as guidance on how
to build an implementation that supports signing.

It is generally the presence of QNames in content that make the inclusive
list necessary. What matters is that signers ensure all namespaces used are
handled properly and that verifiers follow the c14n rules. If the signer
needs or wants to use the inclusive list to accomplish that goal, it's free
to do so.

-- Scott