The specification does not speak of non-repudation for the following reason. An XML Signature associates a specific key with a specific message such that it is computational infeasible for anyone without the key to alter either the message or the... Read More

SignedInfo can have multiple references. Read More

Don?t uses multiple references. Instead, use an Xpath transform, since the expected result is that the elements included by the Xpath are given in document order. Read More

1. Create an enveloping signature around the root element of the document. 2. Create an enveloped signature. The signature is placed inside the document, and its SignedInfo Reference contains transforms that omit the signature from the document. Read More

Use Reference in a Manifest to indicate the content by URI. Reference in Signature should indicate Manifest but should have transform that omits URI. Thus, URI can be changed without breaking signature. NOTE: Core validation does not validate digest... Read More

Create a seperate Signature for every key that you want to apply to SignedInfo and its data objects. To remove redundancy where SignedInfo includes many references, create a single Manifest with each Signature referencing that single Manifest. Read More