RE: [dss] Use-cases and requirements - observations

[Trevor Perrin <trevp@trevp.net>]

At 09:32 AM 7/9/2003 -0400, Tim Moses wrote:

>Trevor - It sounds like we are in agreement.  I don't object to having a
>service interface that "allows" clients to control the plethora of choices.
>I merely want to provide adequate support for those that can't.
>
>The main lesson from GSS_API is that the interface must allow the client to
>stipulate who the intended recipient is.  It's pointless signing a message
>in conformance with one's own policy, if it does not conform with the policy
>of the recipient.  So, the service has to know who the message is intended
>for.  I am thinking of B2B Web-services in which there is a single
>Web-service end-point or WSDL port.  This would not require wild-carding.

Under 3.4 Signing Requirements, how about adding an "Intended Audience" 
section, where the client can optionally pass in a list of names of whom 
the message is targeted to?

Trevor