Re: [wss] Comments on WSS 1.1 Public Review Drafts

[Anthony Nadalin <drsecure@us.ibm.com>]

Editorial:

(1) Understanding Correct, Schema was uploaded a while back will see what went wrong

(2) Makes sense

Content:

(1) Schema was uploaded a while back will see what went wrong

(2) OK, it seems we never define this either, so would have to add it section 7.1

(3) These are duplicates from above and should be deleted

X.509 Token Profile
(1) I have not found one yet

(2) The link http://www.itu.int/rec/recommendation.asp?type=items&lang=e&parent=T-REC-X.509-200110-I!Cor1 work fine for me

Anthony Nadalin | Work 512.838.0085 | Cell 512.289.4122
Prateek Mishra <prateek.mishra@oracle.com>

Prateek Mishra <prateek.mishra@oracle.com>

09/02/2005 01:47 AM

To	wss@lists.oasis-open.org
cc
Subject	[wss] Comments on WSS 1.1 Public Review Drafts

Comments on public review drafts (28 June 2005)

WSS 1.1 SOAP Message Security


Editorial:

(1) It seems that attributes introduced in WSS 1.1 require use of the namespace (wsse11)
but attributes introduced in WSS 1.0 do not. If this understanding is correct (we havent
been able to find the WSS 1.1 schema), it seems worthwhile to indicate this someplace
in the specification (Section 14?).

(2) Lines 1418-1422 are confusing, especially the very first sentence which describes
normative behavior of non-conformant implementations(!). We suggest that the first
sentence be deleted and the second sentence begin with

"Conformant responders MUST include at least one <wsse11:SignatureConfirmation> .."


Content:

(1) We are unable to find a schema file for wsse11 attributes and elements.

(2) line 1083, s/ValueType/TokenType/ as this an STR attribute

(3) line 1088-1090, its not clear which element is linked to the "ValueType" attribute.


X.509 Token Profile

(1) lines 255, "X.509 thumbprint extension", rfc 2459 does not provide a definition
for this term. Is there a normative definition of this term available?

(2) [PKIPATH] reference is broken.



---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  You may a link to this group and all your TCs in OASIS
at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php