Re: [ws-rx] Proposed resolution for i007 WSS 1.0/1.1 token support

[Anish Karmarkar <Anish.Karmarkar@oracle.com>]

Marc Goodner wrote:
> I believe we do not want to exclude WSS 1.1 tokens from being used with 
> the specification. I have examined the spec for what references are 
> needed and whether or not we need any other changes such as new 
> elements. We do not need to add anything in addition to the existing 
> /wsrm:CreateSequence/wsse:SecurityTokenReference as the new 1.1 token 
> all are referenceable from wsse:SecurityTokenReference. In addition 
> there is an extensibility point defined in wsrm:CreateSequence that 
> should accommodate other token types.
> 

I'm beginning to wonder as to why have this element in the spec at all, 
since there is an extensibility point anyway. In terms of composibility 
of specs, it makes sense to stay silent on any security tokens and let 
extensibility be used for all kinds of composition (not just security).

-Anish
--

>  
> 
> To make it explicit that WSS 1.1 is supported I propose the following 
> changes to the specifications to allow referencing of WSS 1.1. The 
> namespaces and references will need to be updated with the final dates 
> after public review closes.
> 
>  
> 
> WS-ReliableMessaging
> 
> Add prefix and namespace for WSS 1.1 to table at line 142:
> 
> wsse11  
> http://docs.oasis-open.org/wss/2005/xx/oasis-2005xx-wss-wssecurity-secext-1.1.xsd 
> 
> 
>  
> 
> Add reference to WSS 1.1 after [WSSecurity] (lines 844-847):
> 
> [WSSecurity11]
> 
> Web Services Security: SOAP Message Security 1.1 (WS-Security 2005)
> 
> http://www.oasis-open.org/committees/download.php/13396/wss-v1.1-spec-pr-SOAPMessageSecurity-01.htm 
> 
> 
> Anthony Nadalin, Chris Kaler, Ronald Monzillo, Phillip Hallam-Baker, 
> eds, OASIS Standard xxxxxx, final date
> 
>  
> 
> WS-ReliableMessagingPolicy
> 
> Add reference to WSS 1.1 after [WSS] (lines 306-308):
> 
> [WSSecurity11]
> 
> Web Services Security: SOAP Message Security 1.1 (WS-Security 2005)
> 
> http://www.oasis-open.org/committees/download.php/13396/wss-v1.1-spec-pr-SOAPMessageSecurity-01.htm 
> 
> 
> Anthony Nadalin, Chris Kaler, Ronald Monzillo, Phillip Hallam-Baker, 
> eds, OASIS Standard xxxxxx, final date
> 
>  
>