Further Reading

XML is a W3C Recommendation and the latest specification defining it can be found at http://www.w3.org/TR/REC-xml. W3C also has recommendations for representing XML content in DOM structure for programmatic access. Documents specifying different aspects of DOM can be found at http://www.w3.org/DOM/. Java API for XML Processing, JAXP, was initially specified through JSR-5 (JAXP1.0) and has been evolved by JSR-63 (JAXP1.1 and 1.2), and now a major revision is in the offing through JSR-206 (JAXP1.3).

Refer to the W3C standards on XML Signature, XML Encryption, Canonical XML and Exclusive XML Canonicalization for authoritative and comprehensive information on most of the topics covered in this chapter. You can find these documents at W3C's website http://www.w3.org by following the appropriate links. For a more readable, yet comprehensive description, look at the book Secure XML: The New Syntax for Signatures and Encryption authored by Donald E. Eastlake III and Kitty Niles, and published by Addison Wesley.

For the two software products used in this chapter's example programs, VeriSign's TSIK and Infomosaic's SecureXML, go to the websites http://www.xmltrustcenter.org and http://www.infomosaic.net, respectively. For TSIK, there is a Yahoo! Group, available only to members (the membership is free), at http://groups.yahoo.com/group/tsik/, where you can ask questions and also look at the archive of earlier questions and answers.