InfoPath Dev

Ted, You are right about singing the XSN, but from the point of view of the end user it is a problem because only the developer signes the template / XSN. As a user you don't have any guarentee that after signing a form the creator of the form will not change the xsn. Any suggestions ?

Patrick. Now i am sorry for the delay in the response. On a regular client usage, it is more clear that the attachment are signed and it is easy to check as you suggested, but my question is related to signing forms in the web, were the attachments are stored on the server. How can i delete something within the form if it is HTTP? How is the ...

If I place a file upload control in a section that requires digital signature, is it signed too? I mean above changing the field to read only, is the full file content stored in the signature data?

Signing a form (entire or sections) appears to sign only the xml content and not the labels stored in the XSN. This can resolve in looking at a form signed with different labels then they were when signing by changing the XSN or creating a new one with same ID. Scenario: Sign form. Open XSN and change label. Re-open form - you don't get any ...