[
Lists Home |
Date Index |
Thread Index
]
> It might be. How would one know? It is likely
> that every one of the OASIS teams out there really
> believes in their project.
Only a handful -- probably no more than six -- are OASIS. Almost the
others are proprietary efforts led by IBM, Microsoft, and various
partners (often BEA). Look at http://www.w3.org/2001/03/WSWS-popa/, in
particular paper 51 (the only one with no individual authors listed).
They've been working on this stuff a *long* time.
At any rate, WS-Security is one of the few that's at OASIS. It meets a
real need: it says how to use XML DSIG, XML Encryption to secure SOAP
messages, and how to convey identity and crypto key information, as well.
/r$
--
Rich Salz, Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
|
