RE: D-AR006.7 - Key management

My response to Hugo on this also applies here.
I.e. the issue at hand for the WG is: in scope or out of scope.
Joe Hui
Exodus, a Cable & Wireless service

===================================

-----Original Message-----
From: Ahmed, Zahid [mailto:zahid.ahmed@commerceone.com]
Sent: Thursday, May 02, 2002 2:21 PM
To: www-ws-arch@w3.org
Subject: RE: D-AR006.7 - Key management



I think this working group does not need to define the 
requirements, mechanics, and policies of key management, 
but as part of the securty assuarance that a security 
enabled web services must provide, we need to be able to 
describe the relationship of a secure web service to 
XKMS and other XML based Trust Services, which provide 
key, certificate, and trust management services. 

Although, I don't think we should imply that the 
use of XKMS or other related standards is required. 

Zahid Ahmed 

-----Original Message----- 
From: David Booth [ mailto:dbooth@w3.org] 
Sent: Thursday, May 02, 2002 12:40 PM 
To: www-ws-arch@w3.org 
Subject: D-AR006.7 - Key management 



>"D-AR006.7 The security framework must include Key Management, pertaining 
>to Public Key Encryption (PKE) and Key Distribution Center (KDC)." 

Why make WS get involved in key management issues?  This seems beyond the 
scope of what WS Arch needs to specify. 


-- 
David Booth 
W3C Fellow / Hewlett-Packard 
Telephone: +1.617.253.1273