Re: Need for new Rec or TR on attaching policy to EPR

I certainly agree with that: dangers and concerns exists and should be 
documented.

-Anish
--

Richard Salz wrote:
> Anish,
> 
> I'm not saying that they're all not useful and valid things to do 
> (although I admit I can't see why putting a WSDL in an EPR is useful), I 
> am just pointing out that there are dangerous, and non-obvious, security 
> concerns. Any document that gets written should at least explain them.
>         /r$
> --
> STSM
> Senior Security Architect
> DataPower SOA Appliances
>