You are in: ECommerce-Guide > News > Trends

ECommerce-Guide Essentials eBiz FAQ Everything you need to know to start your own successful e-business. Selling on eBay How to make money in the online marketplace. PayPal Payments and More What's new in secure payments for your online store. Shopping Cart Software Solutions to close, process and track your online sales.

More Than A Language -- XML Is A Security Tool Too!
By Mark Merkow, CCP, CISSP
May 13, 1999

Like a panacea, everyone is turning to XML to solve even the stickiest of Internet communications problems. The latest significant news comes from IBM with the announcement of their XML Security Suite.

At the heart of the suite you''ll find DOMHASH as a reference implementation for computing digital signatures on XML documents. IBM is offering the XML Security Suite as the basis for the digital signature discussions occurring at both the Internet Engineering Task Force (IETF) and the World Wide Web Consortium (W3C). IBM provides support for element-wise encryption on XML data, digital signatures on entire XML documents, and access control features that aren''t possible under SSL transport layer security.

DOMHASH is intended as a canonicalizer (reduce to canonical terms) for XML digital signatures. The sample implementation provided with the security suite is based on a draft submitted to the IETF by Richard Brown of GlobeSet. You can find the draft at draft-brown-XML-dsig-XX.txt on the IETF Drafts Site. You can also download the XML Security Suite (for free) from IBM''s alphaWorks site through this link.

Tools:

Add ecommerce-guide.com to your favorites Add ecommerce-guide.com to your browser search box IE 7 | Firefox 2.0 | Firefox 1.5.x Receive news via our XML/RSS feed