Comment by mdaniel

Comment by mdaniel 10 months ago

1 reply

> so the attacker can add arbitrary comments without messing up the signature.

Right, I believe you, but the original assertion was "change meaning of document" -- I can likely add arbitrary whitespace, too, under that same "tomato, tomahto" canonicalization path, but how do either of those two insertions benefit the attacker by changing the meaning of the document?

bawolff 10 months ago

Comments affect the dom structure of parsed xml subtley. There were cases where this was enough to log in as a different user. See the link i provided.