Issue 36: WS-Trust pre-authentication

["Marc Goodner" <mgoodner@microsoft.com>]

Tracked as issue 36.

 

Marc Goodner

Technical Diplomat

Microsoft Corporation

Tel: (425) 703-1903

Blog: http://spaces.msn.com/mrgoodner/

---

From: Frederick Hirsch [mailto:frederick.hirsch@nokia.com]
Sent: Monday, February 20, 2006 2:16 PM
To: ws-sx@lists.oasis-open.org
Cc: Hirsch Frederick; Marc Goodner
Subject: [ws-sx] New Issue: WS-Trust pre-authentication

 

PLEASE DO NOT REPLY TO THIS EMAIL OR START A DISCUSSISON THREAD UNTIL THE ISSUE IS ASSIGNED A NUMBER. 

The issues coordinators will notify the list when that has occurred.

 

Protocol:  ws-trust 

 

See ws-trust-1.3-spec-ed-01-r03-diff.doc at  http://www.oasis-open.org/apps/org/workgroup/ws-sx/download.php/16566/ws-trust-1.3-spec-ed-01-r03-diff.doc

 

Artifact:  spec 

 

Type: editorial

 

Title: Clarify term pre-authentication

 

Description:

 

Is "pre-authentication" a well defined term? What does it mean to pre-authenticate using SSL/TLS? 

 

Related issues: none

 

Proposed Resolution:

 

At Line 232, section 2.

Add sentence "Authenticating the server at the transport layer can mitigate the risk of spoofed servers." 

 

 

regards, Frederick

 

Frederick Hirsch

Nokia