Appendix C: Digital Signature for PIDF-LO

Overview

Users of location information may require some assurances about its veracity before they will use the information. The most convenient way to provide such an assurance is to identify the source of the information, then ensure that the information is not modified between the source and destination. A digital signature provides a way to provide this assurance.

Digital signatures can be applied in two ways to a PIDF-LO: the Secure MIME (S/MIME) method in Reference 1 or an XML digital signature (see Reference 2). S/MIME offers features that are not useful in this context, like encryption; whereas an XML digital signature offers some flexibility. This flexibility is what makes the XML digital signature useful in signing PIDF-LO.

This appendix describes how a PIDF-LO document can be digitally signed. In particular, a transform is described that can be used to selectively sign parts of the PIDF-LO document.