Edit comment LC-2489 for XML Security Working Group

Quick access to LC-2489

Comment LC-2489

Comment Shortname:

Commenter: Grosso, Paul <pgrosso@ptc.com>

Message-id:

Section of the document concerned:

[Free text description]Document as a wholeXML Signature Streaming Profile of XPath 1.0 /**/ /*****... XML Signature Streaming Profile of XPath 1.0 W3C Working Draft 21 April 2011 Abstract This document defines a streamable profile of XPat... Status of This Document This section describes the status o... Table of Contents 1. Introduction 2. Streamable 2.1 Strea... 1. Introduction This document specifies a streamable profil... 2. Streamable The XPath profile defined in this document is... 2.1 Streaming for XML signatures In the context of XML Sign... 2.2 Limitations with one-pass streaming Note that it is not... 3. Other requirements Apart from streaming, the XPath profi... 4. Definition of the Profile The following tables define th... 4.1 Top level XPath expression Grammar Explanation... XPath 4.2 LocationPaths Grammar Explanation A... AbsoluteLocationPath RelativeLocationPath AbbreviatedAbsoluteLocationPath AbbreviatedRelativeLocationPath Step AxisSpecifier AbbreviatedAxisSpecifier AxisName NameTest 4.3 Predicates Although this XPath subset allows predicates... RestrictedPredicate AttributeExpr OrExpr AndExpr EqualityExpr RelationalExpr AdditiveExpr MultiplicativeExpr UnaryExpr AttributeReference PrimaryExpr Literal Number Digits FunctionCall Argument FunctionName VariableReference 5. Examples of XPath expression that are part of this profi... A. Algorithm This section outlines an algorithm for a Strea... B. References Dated references below are to the latest know... B.1 Normative references [XPATH] James Clark; Steven DeRos... [XPATH] B.2 Informative references [EBXML-MSG] Ian Jones; Brian Gi... [EBXML-MSG] [HMRMC] [XML-PARSER-STAX] [XMLDSIG-BESTPRACTICES] [XMLDSIG-CORE1] [XMLDSIG-CORE2] [XMLDSIG-XPATH-FILTER2] [XPTR-ELEMENT] [XPTR-XPOINTER]
or

Refinement of the section concerned:

Status:

open proposal pending resolved_yes resolved_no resolved_partial other assigned to Nobody

Type: substantive editorial typo question general comment undefined

Resolution status:

Response drafted Resolution implemented Reply sent to commenter

Response status:

No response from Commenter yet Commenter approved disposition Commenter objected to disposition
Commenter's response (URI):

Comment:

XML Signature Streaming Profile of XPath 1.0

http://www.w3.org/2008/xmlsec/Drafts/xmldsig-xpath/ In general I don't think it is good idea to create yet another XPath subset. Proliferation of XPath subsetting prevents using standalone XPath libraries when implementing various subsets of the language. If streaming is necessary then effort should be derived from XSLT 3.0 which provides streaming facilities.

Related issues: (space separated ids)

WG Notes:

Resolution: The XML Signature Streaming Profile of XPath 1.0 makes sense for the reasons stated in http://lists.w3.org/Archives/Public/public-xmlsec/2011Jun/0013.html and should continue on the Recommendation track.

(Please make sure the resolution is adapted for public consumption)