On Fri, 2006-07-14 at 13:21 -0400, Mitch Amiano wrote:
> https lets you send the data within a stream of packets of encrypted data.
> The signature gives you confidence that an unencrypted packet of data
> hasn't been altered.
> To take a document and encrypt it, so it is unreadable without
> decrypting, you could use encryption software such as GNU Privacy Guard
> or an API's crypt function.
Would this be prior to or after 'signing' it?
If xml-sig is an analogy of an sha1sum, surely after?
I guess a 'standard' crypt library is good enough for data protection
act, due care etc;
though I do need one for a Java client and Microsoft server (which
doesn't make
for an easy life :-)
regards
>
--
Regards,
Dave Pawson
XSLT + Docbook FAQ
http://www.dpawson.co.uk
