RE: D-AR006.7 - Key management

I think this working group does not need to define the
requirements, mechanics, and policies of key management,
but as part of the securty assuarance that a security
enabled web services must provide, we need to be able to 
describe the relationship of a secure web service to 
XKMS and other XML based Trust Services, which provide 
key, certificate, and trust management services.

Although, I don't think we should imply that the
use of XKMS or other related standards is required.

Zahid Ahmed

-----Original Message-----
From: David Booth [mailto:dbooth@w3.org]
Sent: Thursday, May 02, 2002 12:40 PM
To: www-ws-arch@w3.org
Subject: D-AR006.7 - Key management



>"D-AR006.7 The security framework must include Key Management, pertaining 
>to Public Key Encryption (PKE) and Key Distribution Center (KDC)."

Why make WS get involved in key management issues?  This seems beyond the 
scope of what WS Arch needs to specify.


-- 
David Booth
W3C Fellow / Hewlett-Packard
Telephone: +1.617.253.1273