RE: [security-services] Core-08 is now available

["Philpott, Robert" <rphilpott@rsasecurity.com>]

It's unfortunate that ArtifactRequest does sound like a request to obtain an
artifact.  But it's consistent with the other requests and queries in that
regard.  i.e. an AttributeQuery is a query for an assertion with a specified
attribute or set of attributes. An ArtifactRequest is a request for an
assertion associated with the specified artifact.

At least we don't have a method such as in WS-Trust which uses both
"request" and "response" in an element name.  It defines a
<RequestSecurityTokenResponse> message... now is that a "response to a
request" or a "request to obtain a response" or ...? :-0

Rob Philpott
Senior Consulting Engineer 
RSA Security Inc. 
Tel: 781-515-7115 
Mobile: 617-510-0893 
Fax: 781-515-7020 
mailto:rphilpott@rsasecurity.com 


> -----Original Message-----
> From: Scott Cantor [mailto:cantor.2@osu.edu]
> Sent: Tuesday, March 16, 2004 9:34 AM
> To: 'John Hughes'; security-services@lists.oasis-open.org
> Subject: RE: [security-services] Core-08 is now available
> 
> > I presume the ArtifactRequest protocol satisfies one of the
> > Kerberos usecase where we need to get an artifact from the IdP?
> 
> No. ArtifactRequest is how you dereference an Artifact, not how you obtain
> one. Sending an artifact is a binding-level decision made by the entity
> that
> is sending a message. Requesting an artifact means exposing a protocol
> endpoint using that binding only.
> 
> -- Scott
> 
> 
> To unsubscribe from this mailing list (and be removed from the roster of
> the OASIS TC), go to http://www.oasis-
> open.org/apps/org/workgroup/security-services/members/leave_workgroup.php.