  RE: verifying order of resources in a document  From: John
Boyer <jboyer@uwi.com> Date: Thu, 29 Jul 1999 12:50:07 -0700 On
that last one, I didn't finish the first set of comments due to
a distraction.  Here it is.  It seems preposterous to say that
most applications will not care about the order of the elements
in a conversation about digital signatures. For starters, it is
wrong on a theoretical level.  Like it or not, the XML 1.0 spec
does not forbid extensions languages from deriving meaning based
on the order in which the elements appear.  If you want that,
use RDF.  Second, it is wrong on a technical level.  A hash
itself is sensitive to the order of the substrings within a
given message to be hashed.  Third, it's wrong on a practical
level, namely that you have not provided any evidence of having
sampled lots of applications.  For example, the single largest
body of applications based on any kind of markup are HTML forms,
and they care very much about order.  Even with separation of
data and presenta