Re: Need for new Rec or TR on attaching policy to EPR

Anish,

I'm not saying that they're all not useful and valid things to do 
(although I admit I can't see why putting a WSDL in an EPR is useful), I 
am just pointing out that there are dangerous, and non-obvious, security 
concerns. Any document that gets written should at least explain them.
        /r$
--
STSM
Senior Security Architect
DataPower SOA Appliances