Re: Need for new Rec or TR on attaching policy to EPR

> There is a need for a specification of how to attach policy on endpoint 
> subject level to
> an EPR.

Yes, probably.  I'd like to see this spec say what to do when the consumer 
of this EPR is supposed to do when it already has a policy statement, 
e.g., because it was attached to the WSDL.

        /r$

--
STSM
Senior Security Architect
DataPower SOA Appliances