- From: Doug Davis via cvs-syncmail <cvsmail@w3.org>
- Date: Mon, 24 Aug 2009 18:11:15 +0000
- To: public-ws-resource-access-notifications@w3.org
Update of /w3ccvs/WWW/2002/ws/ra/edcopies In directory hutz:/tmp/cvs-serv8445 Modified Files: wsenum.html wsenum.xml wseventing.html wseventing.xml wsfrag.html wsfrag.xml wsmex.html wsmex.xml wsrt.html wsrt.xml wst.html wst.xml Log Message: Add Ram to the list of Acks. Index: wst.xml =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wst.xml,v retrieving revision 1.48 retrieving revision 1.49 diff -u -d -r1.48 -r1.49 --- wst.xml 18 Aug 2009 21:53:47 -0000 1.48 +++ wst.xml 24 Aug 2009 18:11:13 -0000 1.49 @@ -34,8 +34,8 @@ <prevlocs> <loc xmlns:xlink="http://www.w3.org/1999/xlink" xlink:type="simple" - xlink:show="replace" xlink:actuate="onRequest" - href="&prev.wstra.dated;">&prev.wstra.dated; + xlink:show="replace" xlink:actuate="onRequest" + href="&prev.wstra.dated;">&prev.wstra.dated; </loc> </prevlocs> @@ -1525,6 +1525,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wsrt.xml =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wsrt.xml,v retrieving revision 1.32 retrieving revision 1.33 diff -u -d -r1.32 -r1.33 --- wsrt.xml 18 Aug 2009 21:40:08 -0000 1.32 +++ wsrt.xml 24 Aug 2009 18:11:13 -0000 1.33 @@ -2678,6 +2678,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wseventing.html =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wseventing.html,v retrieving revision 1.73 retrieving revision 1.74 diff -u -d -r1.73 -r1.74 --- wseventing.html 18 Aug 2009 21:48:01 -0000 1.73 +++ wseventing.html 24 Aug 2009 18:11:12 -0000 1.74 @@ -1453,6 +1453,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wsrt.html =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wsrt.html,v retrieving revision 1.43 retrieving revision 1.44 diff -u -d -r1.43 -r1.44 --- wsrt.html 18 Aug 2009 21:48:01 -0000 1.43 +++ wsrt.html 24 Aug 2009 18:11:13 -0000 1.44 @@ -1458,6 +1458,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wsfrag.xml =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wsfrag.xml,v retrieving revision 1.7 retrieving revision 1.8 diff -u -d -r1.7 -r1.8 --- wsfrag.xml 18 Aug 2009 21:45:55 -0000 1.7 +++ wsfrag.xml 24 Aug 2009 18:11:13 -0000 1.8 @@ -1676,6 +1676,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wsfrag.html =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wsfrag.html,v retrieving revision 1.7 retrieving revision 1.8 diff -u -d -r1.7 -r1.8 --- wsfrag.html 18 Aug 2009 21:48:01 -0000 1.7 +++ wsfrag.html 24 Aug 2009 18:11:13 -0000 1.8 @@ -903,6 +903,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wst.html =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wst.html,v retrieving revision 1.52 retrieving revision 1.53 diff -u -d -r1.52 -r1.53 --- wst.html 18 Aug 2009 21:48:01 -0000 1.52 +++ wst.html 24 Aug 2009 18:11:13 -0000 1.53 @@ -799,20 +799,20 @@ One or more elements or attributes cannot be updated. </td></tr><tr><th align="left"><b>[Detail]</b></th><td><em>An optional list of the QNames of the elements or attributes that are not allowed to be updated.</em></td></tr></tbody></table></div></div><div class="div1"> -<h2><a name="Security_Considerations" id="Security_Considerations"/>6 Security Considerations</h2><p>It is strongly recommended that the communication between services be +<h2><a name="Security_Considerations" id="Security_Considerations"/>6 Security Considerations</h2><p>It is strongly RECOMMENDED that the communication between services be secured using the mechanisms described in <a href="#WsSec">[WS-Security]</a>.</p><p>In order to properly secure messages, the body (even if empty) and all relevant headers need to be included in the signature. Specifically, the WS-Addressing header blocks, WS-Security timestamp, and any header blocks resulting from a <code><wsa:ReferenceParameters></code> in references need to be signed along with the body in order to "bind" them together and prevent certain types of attacks.</p><p>If a requestor is issuing multiple messages to a resource reference, then - it is recommended that a security context be established using the mechanisms - described in WS-Trust and WS-SecureConversation. It is further recommended + it is RECOMMENDED that a security context be established using the mechanisms + described in WS-Trust and WS-SecureConversation. It is further RECOMMENDED that if shared secrets are used, message-specific derived keys also be used to protect the secret from crypto attacks.</p><p>The access control semantics of resource references is out-of-scope of this specification and are specific to each resource reference. Similarly, any protection mechanisms on resource references independent of transfer - (e.g. embedded signatures and encryption) are also out-of-scope.</p><p>It is recommended that the security considerations of WS-Security also be + (e.g. embedded signatures and encryption) are also out-of-scope.</p><p>It is RECOMMENDED that the security considerations of WS-Security also be considered.</p><p>While a comprehensive listing of attacks is not feasible, the following list summarizes common classes of attacks that apply to this protocol and identifies the mechanism(s) to prevent/mitigate the attacks.</p><ul><li><p><em>Replay</em> - Messages, or portions of messages, can be @@ -844,7 +844,7 @@ strong symmetric key provides sufficient accountability. However, in some environments, strong PKI signatures are required.</p></li><li><p><em>Availability</em> - All reliable messaging services are subject to a variety of availability attacks. Replay detection is a - common attack and it is recommended that this be addressed by the + common attack and it is RECOMMENDED that this be addressed by the mechanisms described in WS-Security. Other attacks, such as network-level denial of service attacks are harder to avoid and are outside the scope of this specification. That said, care SHOULD be taken to ensure that @@ -865,6 +865,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wsmex.xml =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wsmex.xml,v retrieving revision 1.39 retrieving revision 1.40 diff -u -d -r1.39 -r1.40 --- wsmex.xml 18 Aug 2009 21:32:44 -0000 1.39 +++ wsmex.xml 24 Aug 2009 18:11:13 -0000 1.40 @@ -1601,6 +1601,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wsenum.html =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wsenum.html,v retrieving revision 1.51 retrieving revision 1.52 diff -u -d -r1.51 -r1.52 --- wsenum.html 18 Aug 2009 21:48:01 -0000 1.51 +++ wsenum.html 24 Aug 2009 18:11:12 -0000 1.52 @@ -1239,6 +1239,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wsenum.xml =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wsenum.xml,v retrieving revision 1.42 retrieving revision 1.43 diff -u -d -r1.42 -r1.43 --- wsenum.xml 18 Aug 2009 21:25:03 -0000 1.42 +++ wsenum.xml 24 Aug 2009 18:11:12 -0000 1.43 @@ -2267,6 +2267,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wsmex.html =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wsmex.html,v retrieving revision 1.50 retrieving revision 1.51 diff -u -d -r1.50 -r1.51 --- wsmex.html 18 Aug 2009 21:48:01 -0000 1.50 +++ wsmex.html 24 Aug 2009 18:11:13 -0000 1.51 @@ -947,6 +947,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG), Index: wseventing.xml =================================================================== RCS file: /w3ccvs/WWW/2002/ws/ra/edcopies/wseventing.xml,v retrieving revision 1.64 retrieving revision 1.65 diff -u -d -r1.64 -r1.65 --- wseventing.xml 18 Aug 2009 21:10:01 -0000 1.64 +++ wseventing.xml 24 Aug 2009 18:11:13 -0000 1.65 @@ -2648,6 +2648,7 @@ Li Li (Avaya Communications), Mark Little (Red Hat), Prasad Yendluri (Software AG), + Ram Jeyaraman (Microsoft Corp.), Sreedhara Narayanaswamy (CA), Sumeet Vij (Software AG), Vikas Varma (Software AG),
Received on Monday, 24 August 2009 18:11:24 UTC