RE: [security-services] Groups - draft-sstc-solution-profile-soap-02.pdfuploaded

[Anthony Nadalin <drsecure@us.ibm.com>]

TLS sometimes becomes problematic to use everywhere so one profile (as described here) is the use of SOAP between SS and SA and the SOAP message is protected via WSS, this does not preclude other profiles.

Anthony Nadalin | work 512.436.9568 | cell 512.289.4122
<Frederick.Hirsch@nokia.com>

<Frederick.Hirsch@nokia.com>

02/06/2004 12:27 PM

To	Anthony Nadalin/Austin/IBM@IBMUS, <security-services@lists.oasis-open.org>
cc
Subject	RE: [security-services] Groups - draft-sstc-solution-profile-soap-02.pdf uploaded

Tony

Why require a MUST to use WSS: SOAP Message Security for the connection  between SAML service and SAML authority
(line 193, section 4.1).

What if TLS is used to obtain the security properties required? Why force SAML authority implementation of WSS SOAP Message Security?


regards,

Frederick

-----Original Message-----
From: ext drsecure@us.ibm.com [mailto:drsecure@us.ibm.com]
Sent: Thursday, February 05, 2004 11:51 AM
To: security-services@lists.oasis-open.org
Subject: [security-services] Groups -
draft-sstc-solution-profile-soap-02.pdf uploaded


The document draft-sstc-solution-profile-soap-02.pdf has been submitted by Anthony Nadalin (drsecure@us.ibm.com) to the OASIS Security Services TC document repository.

Document Description:
Corrected figures, bad PDF

Download Document:  
http://www.oasis-open.org/apps/org/workgroup/security/download.php/5330/draft-sstc-solution-profile-soap-02.pdf

View Document Details:
http://www.oasis-open.org/apps/org/workgroup/security/document.php?document_id=5330


PLEASE NOTE:  If the above links do not work for you, your email application
may be breaking the link into two pieces.  You may be able to copy and paste
the entire link address into the address field of your web browser.



To unsubscribe from this mailing list (and be removed from the roster of the OASIS TC), go to http://www.oasis-open.org/apps/org/workgroup/security-services/members/leave_workgroup.php.


To unsubscribe from this mailing list (and be removed from the roster of the OASIS TC), go to http://www.oasis-open.org/apps/org/workgroup/security-services/members/leave_workgroup.php.