changing xml schema definitions ?

[Ian Young]

On 12 Mar 2013, at 18:12, Tom Zeller <tzeller at dragonacea.biz> wrote:

> <attribute name="language" type="string" default="javascript">

If this is the schema for a user-visible configuration file (which might therefore, conceivably, be signed) then I'd be wary of this.  Getting a reliable signature in the presence of XSD-imposed defaults depends on either the signer and consumer agreeing on whether to schema validate, or the user always putting in the "default" value explicitly.  The latter obviously kind of defeats the purpose.

Using this approach in the schema for <shibmd:Scope> has caused quite a lot of pain over the years.

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4813 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/dev/attachments/20130312/307e799c/attachment.bin