Re: [wsrp-interfaces] Security questions

[Michael Freedman <Michael.Freedman@oracle.com>]

Thanks for bringing this up.  I had made a note to discuss this this 
morning but forgot along the way.  Yes, it would be great to discuss 
security at the F2F.  Richard currently owns this area.  He had said he 
was trying to get an initial feature proposal together in time for 
todays call.  Unfortunately because he wasn't on the call this morning 
we didn't get an update.  Hopefully he will respond now.
      -Mike-

Subbu Allamaraju wrote:

>
> I would like to know if there is considerable interest in this SC for 
> discussing some security issues at the F2F. I am particularly 
> interested in the following issues:
>
> a. Exchanging signed SAML identity/authorization assertions between a 
> consumer and one or more producers, so that the producer can assert 
> the user identity and map honor any authorization assertions.
>
> b. Transport level security, include message signing, encryption 
> (partial or full) etc basaed on the latest WS-Security spec suite.
>
> One of the goals of the WSRP spec has been to leverage such standards, 
> and it does now seem that these spec can address these issues.
>
> Thanks for any comments.
>
> Subbu
>
>
>