RE: [dss] Core versus Extended Profile Handling

[Rich Salz <rsalz@datapower.com>]

> I understand your desire in making it simple to map this into native
> object-model RPC.
>
> <ed>That is because that is all DSS is !!! A signature creation and
> verification request mechanism.</ed>
>
> I don't share the desire.  Or rather, I see that as less important than
> getting a real extensible protocol specified.
>
> <ed>The thinness and therefore value of what is left is scary to me.</ed>

I think I was misunderstood.

I was saying that this doesn't have to be RPC.  It can be
document-oriented.  I don't see a requirement that the XML messages that
are exchanged must easily and strictly map to a Java, C#, or C++ object
without any intervening work.

It certainly is a synchronous request/response protocol, but it can fit
the new service-oriented architecture as well.

Hope this is more clear.
	/r$
--
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html