> I don't think the language syntax itself can handle the matching
> rules for real-world sets of attributes. I think the language
> must have a way of pointing to executables for handling the
> matching.
Something like the DSIG Transforms element?
<tns:match tns:algorithm="qname">
data of the "pattern" to match
</tns:match>
Makes sense. We could then define standard ones such as perl/xmlschema
regexps, X.509 rules, etc.
--
Zolera Systems, Your Key to Online Integrity
Securing Web services: XML, SOAP, Dig-sig, Encryption
http://www.zolera.com