RE: [ws-sx] Issue 66: Security Policy Usecases

["Tony Gullotta" <tony.gullotta@soa.com>]

Ashok,

Thanks for taking up this task. In 2.1.3 you state there is no way to
indicate the supporting token must be encrypted. However there is a way
to indicate the supporting token must be signed. Are you identifying
that as a shortcoming in the spec? 

Tony 

-----Original Message-----
From: Ashok Malhotra [mailto:ashok.malhotra@oracle.com] 
Sent: Thursday, June 15, 2006 11:13 AM
To: ws-sx@lists.oasis-open.org
Cc: Prateek Mishra; Mischkinsky,Jeff
Subject: [ws-sx] Issue 66: Security Policy Usecases

I'm attaching a document with a number of what we feel are typical
Security Policy usecases along with sample Policies.

The first thing to do is to discuss whether we need more or less
usecases.
My guess is we need more but we also don't need a 100 page document.

Then we need to decide where this fits along with the other WS-SX
deliverables.

All the best, Ashok