Issue 80: Handling EncryptParts/Elements specified under SupportingTokens

["Marc Goodner" <mgoodner@microsoft.com>]

Issue 80...

-----Original Message-----
From: K.Venugopal@Sun.COM [mailto:K.Venugopal@Sun.COM] 
Sent: Wednesday, June 28, 2006 4:29 AM
To: ws-sx@lists.oasis-open.org
Cc: Marc Goodner
Subject: [ws-sx] New Issue : Handling EncryptParts/Elements specified
under SupportingTokens

PLEASE DO NOT REPLY TO THIS EMAIL OR START A DISCUSSISON THREAD UNTIL
THE ISSUE IS ASSIGNED A NUMBER.
The issues coordinators will notify the list when that has occurred.

Protocol : WS-SP

Artifact :  SPEC

Type : design

Title :  Handling EncryptParts specified under SupportingTokens

Description :

       It is not clear from the spec on how EncryptParts specified under
supportingtokens need to be secured.
eg :  If the X509Token present under a SupportingToken is that of the
sender , how can it be used to encrypt the message parts identified by
EncryptParts/Elements that are specified under the supporting token.

            <sp:SupportingTokens
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
                <wsp:Policy>
                <sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/In
cludeToken/Always">
                    <wsp:Policy>
                        <sp:WssX509V3Token11 />
                    </wsp:Policy>
                </sp:X509Token>
                <sp:AlgorithmSuite>
                        <wsp:Policy>
                            <sp:TripleDes />
                        </wsp:Policy>
                </sp:AlgorithmSuite>
                <sp:EncryptedParts
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy";>
                    <sp:Body />               
                </sp:EncryptedParts>
                </wsp:Policy>
            </sp:SupportingTokens>


Related issues:

None

Proposed Resolution:

None


Regards ,
Venu