WSS Submission for standarization

[Kelvin Lawrence <klawrenc@us.ibm.com>]

Mary, here is the formal submission
from the WSS-TC for the documents we wish to bring forward as candidate
OASIS standards. Please let us know asap if you see anything wrong with
this submission. Many thanks in advance.

Kelvin Lawrence, Chris Kaler
WSS TC co-chairs

WSS TC Submission Form for Proceeding
To OASIS Standard Vote for 1.1 documents

The responses on behalf of
the WSS TC are below in blue below.

Simultaneously with the approval of a Committee Specification or at
a later date, a TC may resolve by Special Majority Vote to submit the Committee
Specification to the membership of OASIS for consideration as an OASIS
Standard. Upon resolution of the TC to submit the specification, its Chair
shall submit the following items to the TC Administrator:

 1. Links to the approved Committee Specification in the TC's document
repository, and any appropriate supplemental documentation for the specification,
both of which must be written using the OASIS templates. The specification
may not have been changed between its approval as a Committee Specification
and its submission to OASIS for consideration as an OASIS Standard, except
for the changes on the title page and running footer noting the approval
status and date
 
WS-Security 1.1 http://www.oasis-open.org/committees/download.php/15407/oasis-wss-soap-message-security-1.1.pdf

Username Token Profile 1.1
http://www.oasis-open.org/committees/download.php/15410/oasis-wss-username-token-profile-1.1.pdf

X.509 Token Profile 1.1 http://www.oasis-open.org/committees/download.php/15413/oasis-wss-x509-token-profile-1.1.pdf

Kerberos Token Profile 1.1
http://www.oasis-open.org/committees/download.php/15401/oasis-wss-kerberos-token-profile-1.1.pdf

SAML Token Profile 1.1 http://www.oasis-open.org/committees/download.php/15458/wss-v1%5B1%5D.1-spec-cs-SAMLTokenProfile.pdf
REL Token Profile 1.1 http://www.oasis-open.org/committees/download.php/15404/oasis-wss-rel-token-profile-1.1.pdf

SOAP With Attachments (SWA)
Profile 1.1 http://www.oasis-open.org/committees/download.php/15419/wss-v1.1-spec-cs-SwAProfile.pdf
Schema 1.1   http://www.oasis-open.org/committees/download.php/15264/oasis-wss-wssecurity-secext-1.1.xsd
       
2. The editable version of all files that are part of the Committee Specification;
 
WS-Security 1.1 http://www.oasis-open.org/committees/download.php/15405/oasis-wss-soap-message-security-1.1.doc
Username Token Profile 1.1
 http://www.oasis-open.org/committees/download.php/15408/oasis-wss-username-token-profile-1.1.doc
X.509 Token Profile 1.1 http://www.oasis-open.org/committees/download.php/15411/oasis-wss-x509-token-profile-1.1.doc
Kerberos Token Profile 1.1
http://www.oasis-open.org/committees/download.php/15399/oasis-wss-kerberos-token-profile-1.1.doc
SAML Token Profile 1.1 http://www.oasis-open.org/committees/download.php/15460/wss-v1%5B1%5D.1-spec-cs-SAMLTokenProfile.sxw
REL Token Profile 1.1  http://www.oasis-open.org/committees/download.php/15402/oasis-wss-rel-token-profile-1.1.doc
SOAP With Attachments (SWA)
Profile 1.1  http://www.oasis-open.org/committees/download.php/15417/wss-v1.1-spec-cs-SwAProfile.sxw
Schema 1.1   http://www.oasis-open.org/committees/download.php/15264/oasis-wss-wssecurity-secext-1.1.xsd

3. Certification by the TC that all schema and XML instances included in
the specification, whether by inclusion or reference, including fragments
of such, are well formed, and that all expressions are valid;
    
The XML examples in the documents and the 1.1 Schema are well-formed. We
have run all of the examples through an XML well-formedness checker.

4. A clear English-language summary of the specification;
        
The specifications describe a mechanism for securing web services message
exchanges using a variety of existing security technologies and methodolgies.
The document set is the 1.1 revision of the original WS-Security 2004 OASIS
standard. Several token profiles have been added. The 1.0 Errata has been
factored in. Feedback from the public has been included and steps have
been taken to enhance the readability and usability of the specification.
An additional 1.1 Schema has been produced and a few XML Elements have
been added to the language.

5. A statement regarding the relationship of this specification to similar
work of other OASIS TCs or other standards developing organizations;
        
This work builds upon, but does not attempt to duplicate, the work of Several
standards efforts. Including:

WS-Security 2004 (OASIS WSS TC)
XML DSIG (W3C) 
XML Encryption (W3C) 
SAML (OASIS SS TC) 
SOAP (W3C) 
WSDL (W3C) 
X.509 
Kerberos (IETF) 

6. Certification by at least three OASIS member organizations that they
are successfully using the specification;
        
Certifications have been received from the following companies. We are
including URLs that point to the certification statements in the e-mail
archive.

BEA Systems  -  http://lists.oasis-open.org/archives/wss/200511/msg00064.html
IBM  -  http://lists.oasis-open.org/archives/wss/200511/msg00063.html
Microsoft
 -  http://lists.oasis-open.org/archives/wss/200511/msg00070.html

7.  The beginning and ending dates of the public review(s), a pointer
to the announcement of the public review(s), and a pointer to an account
of each of the comments/issues raised during the public review period(s),
along with its resolution; 
      
The Public Review began on 11th July 2005 and ended on 10th September 2005

Here is the announcement
of the Public Review  http://lists.oasis-open.org/archives/members/200507/msg00002.html

The TC raised an issue to
track every comment passed back to the TC during the public review. The
documents referenced below contain a detailed cross referenc between each
comment and the decision the TC took in addressing the comment.

http://www.oasis-open.org/committees/download.php/15348/PublicReviewComment.htm
http://www.oasis-open.org/committees/download.php/15347/PublicReviewComment.txt

8. An account of and results of the voting to approve the specification
as a Committee Specification, including the date of the ballot and a pointer
to the ballot; 
      
The Committee Specification
Ballot was created on 21st Nov 2005
The results were 37=Yes (93%),
0=No, 0=Abstain  
The TC had 40 voting members
The ballot is here:  http://www.oasis-open.org/apps/org/workgroup/wss/ballot.php?id=886

9. An account of or pointer to votes and comments received in any earlier
attempts to standardize substantially the same specification, together
with the originating TC's response to each comment;
      
This is the first attempt to standardize the 1.1 specification

10. A pointer to the publicly visible comments archive for the originating
TC; 
      
http://lists.oasis-open.org/archives/wss-comment/

11. A pointer to any minority reports submitted by one or more Members
who did not vote in favor of approving the Committee Specification, which
report may include statements regarding why the member voted against the
specification or that the member believes that Substantive Changes were
made which have not gone through public review; or certification by the
Chair that no minority reports exist.

No such reports have been submitted