Re: Proposal for lc87 and lc55 from Rich Salz on 2005-07-06 (public-ws-addressing@w3.org from July 2005)

From: Rich Salz <rsalz@datapower.com>
Date: Wed, 6 Jul 2005 07:43:36 -0400 (EDT)
To: Hugo Haas <hugo@w3.org>
cc: Marc Hadley <Marc.Hadley@Sun.COM>, "public-ws-addressing@w3.org" <public-ws-addressing@w3.org>, Thomas Roessler <roessler@w3.org>
Message-ID: <Pine.LNX.4.44L0.0507060738370.10441-100000@smtp.datapower.com>

Establishing trust is *very* difficult, and it's not a binary decision,
but is often dependant on context such as transaction value, my risk if
wrong, etc.

I strongly suggest we avoid *any* mention of specific mechanisms (e.g.,
certificates, signatures, etc), and leave it with general wording and
descriptions of how must trust what.

	/r$

-- 
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html

Received on Wednesday, 6 July 2005 11:43:42 UTC