Re: [wss] Comments on WSS 1.1 Public Review Drafts

From
Anthony Nadalin <>
Date
2005-09-04T15:59:46+00:00
ID
Thread
Re: [wss] Comments on WSS 1.1 Public Review Drafts
Editorial:

(1) Understanding Correct, Schema was uploaded a while back will see what went wrong

(2) Makes sense

Content:

(1) Schema was uploaded a while back will see what went wrong

(2) OK, it seems we never define this either, so would have to add it section 7.1

(3) These are duplicates from above and should be deleted

X.509 Token Profile

(1) I have not found one yet

(2) The link http://www.itu.int/rec/recommendation.asp?type=items&lang=e&parent=T-REC-X.509-200110-I!Cor1 work fine for me

Anthony Nadalin | Work 512.838.0085 | Cell 512.289.4122

Prateek Mishra <>

Prateek Mishra <> 

09/02/2005 01:47 AM

To



cc

Subject

[wss] Comments on WSS 1.1 Public Review Drafts

Comments on public review drafts (28 June 2005)

WSS 1.1 SOAP Message Security 

Editorial:

(1) It seems that attributes introduced in WSS 1.1 require use of the namespace (wsse11)

but attributes introduced in WSS 1.0 do not. If this understanding is correct (we havent

been able to find the WSS 1.1 schema), it seems worthwhile to indicate this someplace 

in the specification (Section 14?).

(2) Lines 1418-1422 are confusing, especially the very first sentence which describes

normative behavior of non-conformant implementations(!). We suggest that the first

sentence be deleted and the second sentence begin with

"Conformant responders MUST include at least one <wsse11:SignatureConfirmation> .."

Content:

(1) We are unable to find a schema file for wsse11 attributes and elements. 

(2) line 1083, s/ValueType/TokenType/ as this an STR attribute

(3) line 1088-1090, its not clear which element is linked to the "ValueType" attribute.

X.509 Token Profile

(1) lines 255, "X.509 thumbprint extension", rfc 2459 does not provide a definition

for this term. Is there a normative definition of this term available?

(2) [PKIPATH] reference is broken.

 

---------------------------------------------------------------------

To unsubscribe from this mail list, you must leave the OASIS TC that

generates this mail.  You may a link to this group and all your TCs in OASIS

at:

https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php