What exactly is signed using entire form signature - InfoPath Dev
in

InfoPath Dev

What exactly is signed using entire form signature

Last post 10-04-2006 12:22 AM by yoav. 2 replies.
Page 1 of 1 (3 items)
Sort Posts: Previous Next
  • 09-06-2006 04:13 AM

    • yoav
    • Not Ranked
    • Joined on 09-05-2006
    • Posts 4

    What exactly is signed using entire form signature

    Signing a form (entire or sections) appears to sign only the xml content and not the labels stored in the XSN.
    This can resolve in looking at a form signed with different labels then they were when signing by changing the XSN or creating a new one with same ID.
    Scenario:
    Sign form.
    Open XSN and change label.
    Re-open form - you don't get any message of template update (as apposed to adding or deleting controls that do show warnings).
    If the label for example is currency - this could be meaningful....

    Am I missing something?
  • 09-10-2006 10:35 PM In reply to

    Re: What exactly is signed using entire form signature

    You can sign the entire xsn so someone can't go in and change the label:

    http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ipsdk/html/ipsdkDigitallySigningData_HV01126125.asp

  • 10-04-2006 12:22 AM In reply to

    • yoav
    • Not Ranked
    • Joined on 09-05-2006
    • Posts 4

    Re: What exactly is signed using entire form signature

    Ted,
    You are right about singing the XSN, but from the point of view of the end user it is a problem because only the developer signes the template / XSN. As a user you don't have any guarentee that after signing a form the creator of the form will not change the xsn.
    Any suggestions ?
Page 1 of 1 (3 items)
Copyright © 2003-2019 Qdabra Software. All rights reserved.
View our Terms of Use.