Skip to content

Commit dc2d6e8

Browse files
committed
Clarify that the 2.0 draft is not supported
1 parent 69485a3 commit dc2d6e8

File tree

1 file changed

+8
-12
lines changed

1 file changed

+8
-12
lines changed

README.rst

Lines changed: 8 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -2,14 +2,12 @@ SignXML: XML Signature and XAdES in Python
22
==========================================
33

44
*SignXML* is an implementation of the W3C `XML Signature <http://en.wikipedia.org/wiki/XML_Signature>`_ standard in
5-
Python. This standard (also known as XMLDSig and `RFC 3275 <http://www.ietf.org/rfc/rfc3275.txt>`_) is used to provide
6-
payload security in `SAML 2.0 <http://en.wikipedia.org/wiki/SAML_2.0>`_, `XAdES <https://en.wikipedia.org/wiki/XAdES>`_,
7-
and `WS-Security <https://en.wikipedia.org/wiki/WS-Security>`_, among other uses. Two versions of the standard are in
8-
use (`Version 1.1 <http://www.w3.org/TR/xmldsig-core1/>`_, a finalized
9-
`W3C Recommendation <https://www.w3.org/standards/types#REC>`_, and
10-
`Version 2.0 <http://www.w3.org/TR/xmldsig-core2>`_, a draft
11-
`W3C Working Group Note <https://www.w3.org/standards/types#NOTE>`_). *SignXML* implements all of the required components
12-
of the Version 1.1 standard, and most recommended ones. Its features are:
5+
Python. This standard (also known as "XMLDSig") is used to provide payload security in `SAML 2.0
6+
<http://en.wikipedia.org/wiki/SAML_2.0>`_, `XAdES <https://en.wikipedia.org/wiki/XAdES>`_, and `WS-Security
7+
<https://en.wikipedia.org/wiki/WS-Security>`_, among other uses. The standard is defined in the `W3C Recommendation
8+
<https://www.w3.org/standards/types#REC>`_ `XML Signature Syntax and Processing Version 1.1
9+
<http://www.w3.org/TR/xmldsig-core1/>`_. *SignXML* implements all of the required components of the Version 1.1
10+
standard, and most recommended ones. Its features are:
1311

1412
* Use of a libxml2-based XML parser configured to defend against
1513
`common XML attacks <https://docs.python.org/3/library/xml.html#xml-vulnerabilities>`_ when verifying signatures
@@ -229,13 +227,11 @@ Links
229227
* `Change log <https://github.com/XML-Security/signxml/blob/master/Changes.rst>`_
230228
* `List of W3C XML Signature standards and drafts <https://www.w3.org/TR/?title=xml%20signature>`_
231229
* `W3C Recommendation: XML Signature Syntax and Processing Version 1.1 <http://www.w3.org/TR/xmldsig-core1>`_
232-
* `W3C Working Group Note: XML Signature Syntax and Processing Version 2.0 <http://www.w3.org/TR/xmldsig-core2>`_
233-
* `W3C Working Group Note: XML Security 2.0 Requirements and Design Considerations
234-
<https://www.w3.org/TR/2013/NOTE-xmlsec-reqs2-20130411/>`_
235230
* `W3C Working Group Note: XML Signature Best Practices <http://www.w3.org/TR/xmldsig-bestpractices/>`_
236231
* `XML-Signature Interoperability <http://www.w3.org/Signature/2001/04/05-xmldsig-interop.html>`_
237232
* `W3C Working Group Note: Test Cases for C14N 1.1 and XMLDSig Interoperability <http://www.w3.org/TR/xmldsig2ed-tests/>`_
238-
* `RFC 9231: Additional XML Security Uniform Resource Identifiers (URIs) <https://www.rfc-editor.org/rfc/rfc9231.html>`_
233+
* `W3C Working Group Note: XML Signature Syntax and Processing Version 2.0 <http://www.w3.org/TR/xmldsig-core2>`_
234+
(This draft standard proposal was never finalized and is not in general use.)
239235
* `Intelligence Community Technical Specification: Web Service Security Guidance for Use of XML Signature and XML
240236
Encryption <https://github.com/XML-Security/signxml/blob/develop/docs/dni-guidance.pdf>`_
241237
* `XMLSec: Related links <https://www.aleksey.com/xmlsec/related.html>`_

0 commit comments

Comments
 (0)