comments on sstc-saml-exec-overview-2.0-draft-04.pdf

[Jeff Hodges <Jeff.Hodges@neustar.biz>]

I have some comments on this section -- refining the terminology..

 > Securing Web Services
 >
 > SAML Assertions can be used as Security Tokens within SOAP Header blocks
 > in order to carry security and identity information between actors in
               ^^^^^
              convey


 > web service transactions. The SAML Token Profile of the OASIS
               ^^^^^^^^^^^^
               interactions

 > WS-Security TC specifies how SAML assertions should be packaged into the
   ^^^^^^^^^^^
   Web Services Security (WSS)


 > WS-Security <Security> element in an interoperable manner. The Liberty
   ^^^^^^^^^^^
   WSS-defined


 > Alliance's ID-Web Service Framework also uses SAML assertions as the
              ^^^
              Identity

 > base security token format for enabling secure & privacy respecting
                                                 ^^^^^^^^^^^^^^^^^^^^^
                                                 , and privacy-respecting,


 > access to identity-based web services.



thanks,

JeffH