The XML Signature is a technique of associating a key with referred data (octets); it does not define how keys are connected with people or institutions, nor does it define what the data being referenced and signed means.
As a result, while this specification is a crucial component of secure XML applications, it is not adequate in and of itself to handle all application security/trust concerns, particularly when employing signed XML (or other data formats) as the basis of human-to-human communication and agreement. An additional key, algorithm, processing, and rendering requirements must be included in such an application.
