RE: D-AR006.10: Security policy description

> -----Original Message-----
> From: Hugo Haas [mailto:hugo@w3.org]
> Sent: Thursday, May 02, 2002 12:20 PM
> To: www-ws-arch@w3.org
> Subject: D-AR006.10: Security policy description
> 
> 
> D-AR006.10 reads:
> 
>           + D-AR006.10 The description of a Web service SHOULD include
>             security policy.
> 
> There will be a fair number of services that won't need security. I
> think that this should be reworded into (based on D-AR020.1):
> 
>   It MUST be possible to advertise security policies for a Web
>   service.

I don't think so.  Note the "SHOULD" word. 
It doesn't perturb web services that don't need security one bit.

Cheers,

Joe Hui
Exodus, a Cable & Wireless service
========================================
> 
> Regards,
> 
> Hugo
> 
> -- 
> Hugo Haas - W3C
> mailto:hugo@w3.org - http://www.w3.org/People/Hugo/ - 
> tel:+1-617-452-2092
> 
> 

Received on Thursday, 2 May 2002 20:48:28 UTC