Oxygen XML Author plugin 13.2.0

Digital Signatures | 373Inclusive Canonicalization copies all the declarations, even if they are defined outside of the scope of the signature. Inthis way all the declarations you might use will be unambiguously specified. A problem appears when the signed XMLis moved into another XML document which has other declarations because the Inclusive Canonicalization will copythen and the signature will be invalid.Exclusive Canonicalization finds out what namespaces you are actually using (the ones that are a part of the XMLsyntax) and just copies those. It does not look into attribute values or element content, so the namespace declarationsrequired to process these are not copied.This type of canonicalization is useful when you have a signed XML document that you wish to insert into other XMLdocuments and it will insure the signature verifies correctly every time, so it is required when you need self-signedstructures that support placement within different XML contexts.Inclusive Canonicalization is useful when it is less likely that the signed data will be inserted in other XML documentand it's the safer method from the security perspective because it requires no knowledge of the data that are to be securedin order to safely sign them.The canonicalization method can specify whether or not comments should be included in the canonical form output bythe XML canonicalization method. If a canonical form contains comments corresponding to the comment nodes in theinput node-set, the result is called canonical XML with comments. In an uncommented canonical form comments areremoved, including delimiter for comments outside document element.These three operations: Digital Signing, Canonicalization and Verification of the signature are available from the Toolsmenu or from the Editor's contextual menu > Source.Canonicalizing FilesThe user can select the canonicalization algorithm to be used for his document from the following dialog displayed bythe action Canonicalize available from the editor panel's contextual menu > Source .Figure 163: Canonicalization settings dialogThe fields of the dialog are the following:• URL - Specifies the location of the input URL.• Exclusive - If selected, the exclusive (uncommented) canonicalization method is used.• Exclusive with comments - If selected, the exclusive with comments canonicalization method is used.• Inclusive - If selected, the inclusive (uncommented) canonicalization method is used.