Re: level of effort: (Was: Re: Draft minutes of the 13/Apr/2004 XKMS teleconference)

Hi Berin,

> I must admit to being a little unclear as to what is going to be the 
> process for interop here.  We (Apache) are starting a process of 
> creating an implementation.  But it's not quite like XML Encryption or 
> Signature, where I can test my interoperability by simply posting a 
> message/set of messages to the list.  With XKMS the client/server 
> ineractions are very immediate, and you want to show SOAP/TLS etc. as 
> well as XML processing.

Yes. In the past people (mainly commercial companies) have put servers
up and allowed clients to test against those. We'll have to do the same,
though since we won't all be able to afford to leave a server on the
net all the time, some testing may need to be co-ordinated (e.g. we
arrange that you leave your server up for an hour or so at some given
time and I try run my client against it). We did CMP (rfc2510) testing
that way some time ago and it worked ok (though it was bad for those in
unlucky timezones, and we did have some f/w problems to get around -
easier over port 80 though I guess;-).

Can those intending to implement servers let us all know what they can
do in this respect?

> http://www.w3.org/2001/XKMS/xkms-implementations/ mentions a test 
> matrix.  Is there a first cut of this?  

I think Jose has a draft (for which he's awaiting some other w3c
folks' input), but the link should be posted in the next day or
two.

 > Maybe we need to define a set of
>  required interactions mapping them to the XKMS features that need to be 
> shown as working to be interoperable?

Yes. The spec sort of does that via MUST/SHOULD etc. We want to
demonstrate 2 or more of each of those.

> E.g. an XKMS client used to encrypt an XML message to 
> blautenb@apache.org using a key requested from the XKMS server at the 
> ASF (which doesn't exist yet :>).  Being able to use the key to encrypt 
> shows I have successfully retrieved and interpreted it.

We'll gratefully take any and all application code that acts as an xkms
client! (There was talk of a JCP to do an api some time ago, not sure
if that got anywhere?).

Regards,
Stephen.

Received on Wednesday, 14 April 2004 08:44:58 UTC