Security questions

[Subbu Allamaraju <subbu@bea.com>]

I would like to know if there is considerable interest in this SC for 
discussing some security issues at the F2F. I am particularly interested 
in the following issues:

a. Exchanging signed SAML identity/authorization assertions between a 
consumer and one or more producers, so that the producer can assert the 
user identity and map honor any authorization assertions.

b. Transport level security, include message signing, encryption 
(partial or full) etc basaed on the latest WS-Security spec suite.

One of the goals of the WSRP spec has been to leverage such standards, 
and it does now seem that these spec can address these issues.

Thanks for any comments.

Subbu