RE: reminder: OASIS Security Services TC

Title: RE: reminder: OASIS Security Services TC

  
>> 2) how will 
  this work be different than the W3C XML security work scheduled to start after 
  the first of the year?<<

  
 

  
I'm not familiar 
  with what the W3C XML security work is about. The OASIS TC is the place where 
  authentication and authorization issues will be discussed, with possible 
  extensions to other security domains. One of the goals is to be able to 
  interface with other standards and protocols (SOAP, ebXML, and soon languages 
  such as HKMS, etc.) 

  
 

The W3C XML effort 
is called "XML encryption".  It's an effort to establish how to encrypt 
part or all of an XML document in a standardized way.  The focus of this 
effort (through OASIS) is in representing authentication and authorization 
questions and answers as XML documents.  The OASIS security services 
TC will be layered on the XML encryption effort, as well as other W3C XML 
efforts (e.g., the joint W3C/IETF "XML signature" project which is nearing 
completion).  So they're complementary, not 
competitive.

 

--Jeremy

-----------------------------------------------------------
Jeremy 
Epstein                          
voice: 703-460-5852
Security 
Architect                        
FAX: 703-460-5999
webMethods, 
Inc.                         
cell: 703-989-8907
Fairfax 
Virginia             
email: 
-----------------------------------------------------------