← Prev in month ← Prev in thread

[security-services] Approved change: Adding IssueInstant toRequest/Response

From
Scott Cantor <>
Date
2002-01-30T03:11:08+00:00
ID
000101c1a93b$593f4d90$df8cd018@SAIDIN
Thread
[security-services] Approved change: Adding IssueInstant toRequest/Response
The committee approved the following changes:

In core-25, insert after line 889 and after line 1076:
	<attribute name="IssueInstant" type="dateTime" use="required" />

In core-25, add to section 3.2.1, at line 877 and to section 3.4.1, at
line
1068:

IssueInstant [Required]
The time instant of issue of the request/response. It has the type
dateTime, which is built into the W3C XML Schema Datatypes specification
[Schema2].

I make the editorial suggestion to remove section 5.4.6 as well.

In bindings-09, add text to the Security Considerations section in
the SOAP over HTTP description (lines 263-269):

Since a synchronous SSL connection is used to insure message integrity,
examination of the IssueInstant attributes in Request and Response does
not protect against any known attacks and is therefore not required.

-- Scott
← Prev in month ← Prev in thread