RE: [ws-rx] i156, New section 6 wording too specific (alternate proposal)

+1

-----Original Message-----
From: Pete Wenzel [mailto:] 
Sent: Wednesday, August 09, 2006 7:22 PM
To: 
Subject: [ws-rx] i156, New section 6 wording too specific (alternate
proposal)

I'd like to suggest a different wording that might be a bit more
accurate:

Change (now line 1288 in 8/7 editor's draft) to:

  "... demonstrate proof-of-possession of the secret associated with
  the token (e.g., by using or deriving from a private or secret
  key)."

--Pete

> From: Doug Bunting [mailto:]
> Sent: Tuesday, August 01, 2006 12:38 AM
> To: WS-RX TC
> Subject: New Issue: New section 6 wording too specific
> 
> *Title*
> New section 6 wording too specific
> 
> *Description*
> The current WD[1] mentions (line 1272) "demonstrate proof-of-rights to

> the referenced key" but "The <wsse:SecurityTokenReference> element 
> provides an extensible mechanism for referencing security tokens and 
> other key bearing elements." according to [2] (lines 829-830).
> Security tokens, in turn, include any "claims" such as username / 
> password pairs.  The WD wording is thus too specific.
> 
> *Justification*
> Should support any WSS profile defined now or in the future.
> Therefore, should word WS-RM as generally as WSS.
> 
> *Target*
> core
> 
> *Type*
> Editorial though the text appears normative
> 
> *Proposal*
> change line 1272 to read "demonstrate proof-of-rights to the
referenced *claim*"
> 
> *References*
> [1] Latest WS-RM WD
> <http://www.oasis-open.org/committees/download.php/19430/wsrm-1.1-spec
> -wd-15.pdf>
> 
> [2] WSS 1.1 core OS
> <http://www.oasis-open.org/committees/download.php/16790/wss-v1.1-spec
> -os-SOAPMessageSecurity.pdf>

--
Pete Wenzel <>
Sun Microsystems, SOA & Business Integration Standards & Product
Strategy
+1 (626)471-6311, Sun x61311, US-Pacific TZ