logo       


Choosing A Webhost:
A web hosting service is a type of Internet hosting service that allows individuals and organizations to provide their own website accessible via the World Wide Web. Web hosts are companies that provide space on a server they own for use by their clients as well as providing Internet connectivity, typically in a data center. Web hosts can also provide data center space and connectivity to the Internet for servers they do not own to be located in their data center, called colocation. more...

Non-DOM based XML signing/verification: msg#00070

Subject: Non-DOM based XML signing/verification
I have been using the xmlsec java library for quite a while now to
digitally sign (and subsequently verify) large (multi-hundred
megabyte) XML documents. However, the burden on our resources of the
DOM based strategy has become to much to bear in the attempt to scale
our system.

After looking for SAX based implementations and coming up empty, I
made the tough decision to abandon the standard and roll my own. After
some research I fairly quickly dismissed SAX as the appropriate
mechanism.

Instead I decided to use STaX, and specifically the element based
reader/writer support. Using the element based approach allowed me to
get some canonicalization out of the process (enough for my needs),
and still maintain the fairly high performance and low memory
requirements implied in a STaX implementation.

My question is this: Are there any efforts like this currently going
on in the community (none that I could find, outside of a largely
untested SAX based patch)?

If not, would there be interest in helping to advance the state of the
code I have, and if possible modify it to follow the XML Signature
specification? Currently the code suits my needs, which are very
limited, and there would likely be significant effort in bringing it
up to spec.

However, I feel strongly that a DOM based implementation can be not
much more than a reference implementation if we're ever to make XML
signature (and encryption) a part of large scale enterprise class
systems.

Any comments or criticisms would be much appreciated.

--
rjf&



Ruby Jobs
Java Jobs
Jobs in California
more...
what
job title, keywords
where
city, state, zip
jobs by job search
<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

Recently Viewed:
db.firebase.por...    text.xml.xalan....    qnx.openqnx.dev...    user-groups.zar...    internationaliz...    kde.devel.konve...    finance.e-gold....    emacs.latex.pre...    gis.therion/200...    web.webmin.gene...    yellowdog.gener...    vserver/2003-08...    redhat.release....    sysutils.tivoli...    xfree86.expert/...    mail.becky.user...    hardware.netapp...    netbsd.ports.xe...    python.distutil...    boot-loaders.gr...    culture.interne...    java.springfram...    activedir/2006-...   
Home | blog view | USPTO Patent Archive | advertise | OSDir is an inevitable website. super tiny logo

Free Magazines

Cisco News
Receive a free quarterly e-newsletter with exclusive articles on how Cisco IT uses its own products and solutions to enable the business.
subscribe

Systems Management News, the newspaper for IT systems administration and data center managers! Each issue of Systems Management News is chock-full of news and analysis to help you understand what's happening in your field.
subscribe

The Enterprise Newsweekly eWeek is the essential technology information source for builders of e-business.
subscribe

Oracle Magazine Oracle Magazine contains technology strategy articles, sample code, tips, Oracle and partner news, how to articles for developers and DBAs, and more. Oracle (NASDAQ: ORCL) is the world's largest enterprise software company.
subscribe

Total Telecom Total Telecom is "The Economist of the communications industry".
subscribe