InfoPath Dev

If I place a file upload control in a section that requires digital signature, is it signed too?
I mean above changing the field to read only, is the full file content stored in the signature data?

Hi Yoav,
Sorry for the delay in responding to you. This is a good question. My guess is that the digital signature will be calculated based on the file attachment since contents must not change and the file attachment is considered contents (and in fact base64-encoded in the form's data). You could try a little experiment and create a form with one and then try to delete the file attachment after signing (use notepad) and see if the form can still be opened without an error.

Patrick.
Now i am sorry for the delay in the response.

On a regular client usage, it is more clear that the attachment are signed and it is easy to check as you suggested, but my question is related to signing forms in the web, were the attachments are stored on the server.


How can i delete something within the form if it is HTTP? How is the form stored in MOSS - is it stored in a field in a table as binary ?

How is the attachment being signed using my certificate if it is stored on the server?

Thanks for you answer.

Yoav

If you mean that you are using the file attachment in the browser form and then signing the form in the browser, then I believe the answer is yes, the attachment is stored in the XML and is signed with the rest of the data just like on the rich-client.

Does that answer your question?