Decrypting intermediaries

[Tim Moses <tim.moses@entrust.com>]

Tony - Hal and I have discussed the question of decrypting intermediaries
and come up with the following text. 

Parts of a SOAP message may be encrypted in such a way that they can be
decrypted by an intermediary that is targeted by one of the SOAP headers.
In this case, the intermediary MAY leave the original <xenc:EncryptedData>
element in the message when forwarding it, or it MAY substitute the
corresponding plaintext.  This choice SHOULD be determined by out-of-band
agreement.

This text should go at the end of para 9.3.2 of "WSS:SOAP Message
Security-15".

All the best.  Tim.

-----------------------------------------------------------------
Tim Moses
613.270.3183