-1
Christopher Ferris
STSM, Software Group Standards Strategy
email:
blog: http://www.ibm.com/developerworks/blogs/dw_blog.jspa?blog=440
phone: +1 508 377 9295
Tom Rutt <> wrote on 07/17/2006
02:31:02 PM:
> Paul Fremantle wrote:
>
> >I'm trying to understand the latest "concrete" proposals
for the
> >security issues.
> >
> >Based on Doug Buntings note last week, and the discussions since
then.
> >
> >1) latest from Microsoft and IBM
> ><http://lists.oasis-open.org/ws-rx/200607/msg00036.html>
modified by Gil
> >- http://lists.oasis-open.org/ws-rx/200607/msg00070.html,
and agreed to
> >at least by Marc.
> >
> >2) latest from Oracle and SAP
> >http://lists.oasis-open.org/ws-rx/200607/msg00075.html also modified
by
> >Gil's http://lists.oasis-open.org/ws-rx/200607/msg00070.html
> >
> >3) Close no action from Doug Bunting.
> >http://lists.oasis-open.org/ws-rx/200607/msg00088.html
> >
> >Can the owners of these proposals (and any others I missed) please
> >confirm these are the latest that you support.
> >
> >Thanks
> >Paul
> >
> >
> >
> I have a new compromise proposal to discuss.
>
> Let the sending side pick either Oracle or Microsoft way to send STR.
> (some implementations seem to be able to support one way better over
the
> other).
>
> The receiving side would have to accept create sequence messages with
> the str in either place (i.e., in security header with usage attribute,
> or directly in
> createSequence element in body).
>
> The receiving implementation would look in both places if the
> wsrm:UsesSequenceSTR element is present as a soap header.
>
> Tom Rutt
>
> --
> ----------------------------------------------------
> Tom Rutt email: ;
> Tel: +1 732 801 5744 Fax: +1 732
774 5133
>
>
