OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

security-services message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Subject: [security-services] Approved change: Adding IssueInstant toRequest/Response


The committee approved the following changes:

In core-25, insert after line 889 and after line 1076:
	<attribute name="IssueInstant" type="dateTime" use="required" />

In core-25, add to section 3.2.1, at line 877 and to section 3.4.1, at
line
1068:

IssueInstant [Required]
The time instant of issue of the request/response. It has the type
dateTime, which is built into the W3C XML Schema Datatypes specification
[Schema2].

I make the editorial suggestion to remove section 5.4.6 as well.

In bindings-09, add text to the Security Considerations section in
the SOAP over HTTP description (lines 263-269):

Since a synchronous SSL connection is used to insure message integrity,
examination of the IssueInstant attributes in Request and Response does
not protect against any known attacks and is therefore not required.

-- Scott



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Powered by eList eXpress LLC