The XML Security Working Group published six documents related to XML signature and encryption. XML Signatures provide integrity, message authentication, and/or signer authentication services for data of any type, whether located within the XML that includes the signature or elsewhere.
* "XML Signature Best Practices." This Working Draft describes best practices related to improving security and mitigating attacks, yet others are for best practices in the practical use of XML Signature, such as signing XML that doesn't use namespaces, for example.
* "XML Signature Syntax and Processing Version 1.1." This Working Draft updates the signature specification.
* "XML Signature Transform Simplification: Requirements and Design." This Working Draft outlines a proposed simplification of the XML Signature Transform mechanism, intended to enhance security, performance, streamability and to ease adoption.
* "W3C XML Encryption Syntax and Processing Version 1.1." This Working Draft updates the encryption specification.
* "XML Security Generic Hybrid Ciphers." This First Public Working Draft augments XML Encryption Version 1.1 by defining algorithms, XML types and elements necessary to enable use of generic hybrid ciphers in XML Security applications.
* "XML Security Algorithm Cross-Reference." This Group Note collects the various known URIs for encryption algorithms (at the time of its publication) and indicates which specifications define them.
Learn more about the Security Activity.
Aucun commentaire:
Enregistrer un commentaire