> I think that you DO need the language I proposed to define what it means
> to "understand" a wsse:Security header block. Without it, there will be
> rampant confusion.
I believe that it's up to the application that uses WSS, and not WSS
itself. I should have made that more explicit in my earlier message.
/r$
--
Rich Salz, Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html