Re: [wss] Fwd: WS-Security specs make their debut

[Anthony Nadalin <drsecure@us.ibm.com>]

Phil,

The draft specifications can be found at
http://www-106.ibm.com/developerworks/library/ws-secroad/#1 or
http://msdn.microsoft.com/webservices/understanding/gxa/default.aspx

Anthony Nadalin | work 512.436.9568 | cell 512.289.4122


|---------+---------------------------->
|         |           "Phillip H.      |
|         |           Griffin"         |
|         |           <phil.griffin@asn|
|         |           -1.com>          |
|         |                            |
|         |           12/20/2002 09:42 |
|         |           AM               |
|---------+---------------------------->
  >--------------------------------------------------------------------------------------------------------------------------------------------------|
  |                                                                                                                                                  |
  |       To:       Kelvin Lawrence/Austin/IBM@IBMUS                                                                                                 |
  |       cc:       Ed Reed <ereed@novell.com>, ckaler@microsoft.com, Gary Hein <GHein@novell.com>, Shawn Dickerson <SDICKERSON@novell.com>, Sarah   |
  |        Mees <SMees@novell.com>, Winston Bumpus <WBUMPUS@novell.com>, wss@lists.oasis-open.org                                                    |
  |       Subject:  Re: [wss] Fwd: WS-Security specs make their debut                                                                                |
  >--------------------------------------------------------------------------------------------------------------------------------------------------|




Thanks Kelvin. I'm particularly interested in the conversation
document, with XCBF and WSS glasses on. I amy have missed
it, but is there a place I can get the draft to have a look at? There
are other in XCBF also involved in ITU-T who likely will be
very much interested in this work.

Phil Griffin


Kelvin Lawrence wrote:

      Hi Ed,  thanks for the note, I think the press article you referenced
      was unfortunately very poorly worded and seems to use the phrase
      "WS-Security" in a generic sense where the phrase "security roadmap"
      would  have been more accurate.

      As I know you are aware, IBM and Microsoft produced a Web services
      security roadmap back in April, along with the roadmap, a single
      concrete specification called WS-Secuirity was also produced.
      WS-Security was outlined in the roadmap as the basis for the rest of
      the specifications in the roadmap. WS-Security was consequently
      submitted to OASIS and the WSS TC was chartered.

      What IBM, Microsoft,Verisign, RSA Security, BEA  Systems and SAP have
      done this week is to deliver drafts of some of the other
      specifications described in the roadmap. As you recall the WSS-TC did
      not want to assume the responsibility of the roadmap, and at our
      first F2F in September the charter was clarified after a lot of
      discussion to make it clear what the scope of the TC was. The roadmap
      itself was not submitted to the TC in any formal way.

      So while I agree the article you pointed us all to is poorly worded,
      the WSS-TC has not undertaken any new specifications in your absence
      or anything like that  and the charter has not been changed. I spoke
      to some of the people who participated in the announcement of these
      new specs and they told me that it was made very clear that these
      were new specs being delivered as part of filling out the roadmap.
      Unfortunately this particular journalist seems to have used some
      incorrect words and confused WS-Security with the overall roadmap. I
      have seen other articles this week that do focus on the roadmap more
      accurately.

      Also, some of the other press articles I have seen do go on to say
      that the authors of the new specifications intend to take the
      specifications to a standards body which is accurate coverage. As of
      today, the new specifications are published to the respective
      author's web sites to allow people to comment on them.

      I hope this clears things up a bit, and likewise best wishes for a
      safe and happy holiday period to you and all of our TC members.

      Cheers
      Kelvin