W3C home > Mailing lists > Public > public-ws-addressing@w3.org > December 2004

Re: i008 - Marking RefProps/RefParams using attributes [Take #2]

From: Rich Salz <rsalz@datapower.com>
Date: Wed, 15 Dec 2004 13:54:06 -0500
Message-ID: <41C0884E.4090802@datapower.com>
To: "Srinivas, Davanum M" <Davanum.Srinivas@ca.com>
CC: public-ws-addressing@w3.org

> Here's the re-worked proposal…dropping the <wsa:RefPs> element as per 
> Jonathan [1]


As for the security issues, they're not that big a deal.  It means taht 
under some circumstances, signing a refp element will require that the 
signature reference (dsig:Reference element) use an XPath transformation 
to omit the attribute when signing the element.

And since the refps are now "generically visible," this addresses the 
security concerns I've been raising.
Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
XML Security Overview  http://www.datapower.com/xmldev/xmlsecurity.html
Received on Wednesday, 15 December 2004 18:45:20 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 21:04:07 UTC