Tim,
I'm not sure the purpose of this text, what are you trying to clarify, as
I'm not sure we should be defining intermediary behavior here, this seems
more like something WS-I should be doing.
Anthony Nadalin | work 512.436.9568 | cell 512.289.4122
|---------+---------------------------->
| | Tim Moses |
| | <tim.moses@entrus|
| | t.com> |
| | |
| | 08/13/2003 07:44 |
| | AM |
|---------+---------------------------->
>------------------------------------------------------------------------------------------------------------------------------------------------|
| |
| To: Anthony Nadalin/Austin/IBM@IBMUS, "'WS-Security'" <> |
| cc: |
| Subject: Decrypting intermediaries |
>------------------------------------------------------------------------------------------------------------------------------------------------|
Tony - Hal and I have discussed the question of decrypting intermediaries
and come up with the following text.
Parts of a SOAP message may be encrypted in such a way that they can be
decrypted by an intermediary that is targeted by one of the SOAP headers.
In this case, the intermediary MAY leave the original <xenc:EncryptedData>
element in the message when forwarding it, or it MAY substitute the
corresponding plaintext. This choice SHOULD be determined by out-of-band
agreement.
This text should go at the end of para 9.3.2 of "WSS:SOAP Message
Security-15".
All the best. Tim.
-----------------------------------------------------------------
Tim Moses
613.270.3183
