[Home] [By Thread] [By Date] [Recent Entries]
On Fri, 2006-07-14 at 13:21 -0400, Mitch Amiano wrote: > https lets you send the data within a stream of packets of encrypted data. > The signature gives you confidence that an unencrypted packet of data > hasn't been altered. > To take a document and encrypt it, so it is unreadable without > decrypting, you could use encryption software such as GNU Privacy Guard > or an API's crypt function. Would this be prior to or after 'signing' it? If xml-sig is an analogy of an sha1sum, surely after? I guess a 'standard' crypt library is good enough for data protection act, due care etc; though I do need one for a Java client and Microsoft server (which doesn't make for an easy life :-) regards > -- Regards, Dave Pawson XSLT + Docbook FAQ http://www.dpawson.co.uk
|

Cart



