https://www.infopathdev.com:443/forums/41.aspxIf you're not sure where to ask your question, ask it here. If necessary, our moderators will make sure it gets classified in the correct board.enCommunityServer 2007 SP3 (Build: 31118.962)https://www.infopathdev.com:443/forums/thread/18587.aspxFri, 13 Oct 2006 05:35:41 GMT033a2e2d-04e2-4a9d-be01-a4634161eefd:18587Shiraz Cupala0https://www.infopathdev.com:443/forums/thread/18587.aspxhttps://www.infopathdev.com:443/forums/commentrss.aspx?SectionID=41&PostID=18587If you mean that you are using the file attachment in the browser form and then signing the form in the browser, then I believe the answer is yes, the attachment is stored in the XML and is signed with the rest of the data just like on the rich-client.<br /><br />Does that answer your question?https://www.infopathdev.com:443/forums/thread/18586.aspxWed, 04 Oct 2006 07:14:13 GMT033a2e2d-04e2-4a9d-be01-a4634161eefd:18586yoav0https://www.infopathdev.com:443/forums/thread/18586.aspxhttps://www.infopathdev.com:443/forums/commentrss.aspx?SectionID=41&PostID=18586Patrick.<br />Now i am sorry for the delay in the response. <br /><br />On a regular client usage, it is more clear that the attachment are signed and it is easy to check as you suggested, but my question is related to signing forms in the web, were the attachments are stored on the server.<br /><br /><br />How can i delete something within the form if it is HTTP? How is the form stored in MOSS - is it stored in a field in a table as binary ?<br /><br />How is the attachment being signed using my certificate if it is stored on the server?<br /><br />Thanks for you answer.<br /><br />Yoavhttps://www.infopathdev.com:443/forums/thread/18585.aspxTue, 12 Sep 2006 05:18:29 GMT033a2e2d-04e2-4a9d-be01-a4634161eefd:18585Patrick Halstead0https://www.infopathdev.com:443/forums/thread/18585.aspxhttps://www.infopathdev.com:443/forums/commentrss.aspx?SectionID=41&PostID=18585Hi Yoav,<br />Sorry for the delay in responding to you. This is a good question. My guess is that the digital signature will be calculated based on the file attachment since contents must not change and the file attachment is considered contents (and in fact base64-encoded in the form's data). You could try a little experiment and create a form with one and then try to delete the file attachment after signing (use notepad) and see if the form can still be opened without an error.https://www.infopathdev.com:443/forums/thread/18495.aspxWed, 06 Sep 2006 11:14:44 GMT033a2e2d-04e2-4a9d-be01-a4634161eefd:18495yoav0https://www.infopathdev.com:443/forums/thread/18495.aspxhttps://www.infopathdev.com:443/forums/commentrss.aspx?SectionID=41&PostID=18495If I place a file upload control in a section that requires digital signature, is it signed too?<br />I mean above changing the field to read only, is the full file content stored in the signature data?<br />