RE: XKMS; where's the Web?

While I am all for the use of HTTP and GET in Web architecture by default,
it seems to me their limited security capabilities are often insufficient
for those desired and required by protocols like XKMS and systems in which
high levels of flexible and robust security are required.

Mark, if you were to provide illustrative examples where in XKMS, HTTP GET
could be used instead (keeping in mind the security issues), that would be
useful.

Regards, Ed
========================================
Ed Simon <edsimon@xmlsec.com>
(613) 726-9645
 
Interested in XML, Web Services, or Security?  Visit "www.xmlsec.com".
Now available!  "Web Services Security" published by Osborne (ISBN#
0072224711)


-----Original Message-----
From: www-xkms-request@w3.org [mailto:www-xkms-request@w3.org] On Behalf Of
Hallam-Baker, Phillip
Sent: February 9, 2004 2:02 PM
To: 'Mark Baker'; www-xkms@w3.org
Subject: RE: XKMS; where's the Web?


Mark,

	I suspect that the reason XKMS is designed the way it is is that I
started working on the design with Barb, Brian etc before Web Services
existed, it was the first specification proposal to use SOAP.

	Equally my view of the Web architecture may be somewhat dated, I
started in 1992 after all.  

		Phill

> -----Original Message-----
> From: Mark Baker [mailto:distobj@acm.org]
> Sent: Monday, February 09, 2004 1:41 PM
> To: www-xkms@w3.org
> Subject: XKMS; where's the Web?
> 
> 
> 
> Hi,
> 
> I'll try to be polite, because I don't believe I know many of you, but 
> I have to wonder, what does XKMS/XKMS2 have to do with the Web 
> exactly?
> URIs aren't used for important resources, nor is HTTP GET used for 
> retrieving data.  Are you familiar at all with the TAG's work, where 
> they have, for example, recommended that GET be used whenever you're 
> "asking a question", or "performing a query"[1]?
> 
> It seems that XKMS is a "Web services" effort, which is ok in that Web 
> services are happening, in part, at the W3C.  But they also have some 
> serious architectural problems in their current form, and
> XKMS* seems to
> have embraced many of their worst practices ... at least IMHO.
> 
> I think XKMS2, as an attempt to improve upon v1, would do well to 
> embrace Web architecture.
> 
> Thanks.
> 
>  [1] http://www.w3.org/2001/tag/doc/whenToUseGet.html
> 
> Mark.
> -- 
> Mark Baker.   Ottawa, Ontario, CANADA.        http://www.markbaker.ca
> 

Received on Monday, 9 February 2004 14:25:29 UTC