Re: [uddi-spec] Change request for discard transfer token API

[Max Voskob <mvoskob@msi.com.au>]

Andrew,

 

I wonder what impact would this change have on existing implementations of v.3?

 

Are there any opinions from the vendors?

 

Cheers,

Max

 

----- Original Message -----

From: Andrew Hately

To: uddi-spec@lists.oasis-open.org

Sent: Thursday, February 06, 2003 6:55 PM

Subject: [uddi-spec] Change request for discard transfer token API

Please review the attached CR-0024.  It covers a new API as there is currently no means in the specification to invalidate a custrody/ownership transfer token.  I view this as an oversight and potential security issue should  a publisher lose track of the opaqueToken, there should be a means to invalidate the token.

Andrew Hately
IBM Austin
UDDI Development, Emerging Technologies