RIF: How much XML Signature is mature?

Thank you for your answer. Don.
 
>Timeline might be a little longer than six months, but direct hardware
>support for 3D-Secure is coming.  For example, a chip that can parse,
>encrypt, decrypt, canonicalize, sign, and validate XML would be very useful
>as well as marketable since the market has started to realize that
>XML/Crypto combo throw a wrench into Google-like approaches to scalability.

 
These were  also my fears. Unfortunately, delivering innovation means sometimes starting without a clear de facto standard; other times, without a de iure one. 
 
Gino

	-----Messaggio originale----- 
	Da: Don Park [mailto:donpark@docuverse.com] 
	Inviato: dom 19/10/2003 0.49 
	A: 'Rich Salz'; Gino Tesei; w3c-ietf-xmldsig@w3.org 
	Cc: 
	Oggetto: RE: How much XML Signature is mature?
	
	

	> XML DSIG is being used in the real world for real financial
	> transactions.  For example RouteOne is doing online auto loan
	
	I would say 3D-Secure is a prime example of widely used protocol based on
	XML-Signature.  Since 3D-Secure is all about credit-card processing, you
	might want to take a look at it.  One can extend 3D-Secure to support the
	kind of transaction you described.
	
	> What's your opinion about such issues? What's new in six months?
	
	Timeline might be a little longer than six months, but direct hardware
	support for 3D-Secure is coming.  For example, a chip that can parse,
	encrypt, decrypt, canonicalize, sign, and validate XML would be very useful
	as well as marketable since the market has started to realize that
	XML/Crypto combo throw a wrench into Google-like approaches to scalability.
	
	Best,
	
	Don Park
	http://www.docuverse.com/

	http://www.docuverse.com/blog/donpark/

	
	> What's your opinion about such issues? What's new in six months?
	>
	> XML DSIG, as supported by WS-Security (i.e., signing SOAP messages)
	> is the way to go.  There are still security issues (implementation,
	> implications of canonicalization, etc.) that will need some analysis
	> on your side.  In six months, toolkits will be widespread, companies
	> like mine will be more popular, and WS-I will have a draft profile
	> that offers solid interop guidance on WS-Security and XML DSIG.
	> Also, in the greater Boston area it will be cloudy with a chance
	> of rain and temperatures around 68 Fahrenheit. :)
	>
	> Hope this helps.
	>         /r$
	> --
	> Rich Salz                  Chief Security Architect
	> DataPower Technology       http://www.datapower.com

	> XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html

	> XML Security Overview
	> http://www.datapower.com/xmldev/xmlsecurity.html