Subject: Issue 36: WS-Trust pre-authentication
Tracked as issue 36.
Tel: (425) 703-1903
From: Frederick Hirsch
PLEASE DO NOT REPLY TO THIS EMAIL OR START A DISCUSSISON THREAD UNTIL THE ISSUE IS ASSIGNED A NUMBER.
The issues coordinators will notify the list when that has occurred.
See ws-trust-1.3-spec-ed-01-r03-diff.doc at http://www.oasis-open.org/apps/org/workgroup/ws-sx/download.php/16566/ws-trust-1.3-spec-ed-01-r03-diff.doc
Title: Clarify term pre-authentication
Is "pre-authentication" a well defined term? What does it mean to pre-authenticate using SSL/TLS?
Related issues: none
At Line 232, section 2.
Add sentence "Authenticating the server at the transport layer can mitigate the risk of spoofed servers."