Re: Need for new Rec or TR on attaching policy to EPR from Richard Salz on 2007-04-04 (public-ws-addressing@w3.org from April 2007)

From: Richard Salz <rsalz@us.ibm.com>
Date: Wed, 4 Apr 2007 14:15:35 -0400
To: Anish Karmarkar <Anish.Karmarkar@oracle.com>
Cc: WS-Addressing <public-ws-addressing@w3.org>
Message-ID: <OFC765703B.AC99B7A0-ON852572B3.0063EC5A-852572B3.0064464C@us.ibm.com>

Anish,

I'm not saying that they're all not useful and valid things to do 
(although I admit I can't see why putting a WSDL in an EPR is useful), I 
am just pointing out that there are dangerous, and non-obvious, security 
concerns. Any document that gets written should at least explain them.
        /r$
--
STSM
Senior Security Architect
DataPower SOA Appliances

Received on Wednesday, 4 April 2007 18:15:43 UTC