Potential XPath Issues for WS-SecurityPolicy

Some potential issues related to XPath in WS-SecurityPolicy.

(1) In the SignedElements and EncryptedElements policy assertions of  
WS-SecurityPolicy, an XPath expression is used to specify what  
elements should be signed/encrypted. However, there appears to be no  
text that says an XPath MUST be namespace-qualified (and examples  
have not ns-qualified the XPaths).

Proposed resolution: add text saying that an XPath expression MUST be  
namespace qualified

(2)  define a limited set of XPath expressions that MUST be supported  
by an implementation (and list explicitly )

regards, Frederick

Frederick Hirsch
Nokia