XML and Web Services In The News - 19 July 2006

Provided by OASIS | Edited by Robin Cover

This issue of XML Daily Newslink is sponsored by Sun Microsystems


HEADLINES:

 Implementing the Atom Publishing Protocol
 Software Freedom Law Center Gives Thumbs-Up to OpenDocument
 W3C XForms 1.1 Working Draft
 Java XML Digital Signatures
 What Is Geronimo?
 Ipedo's EII Platform Gets a Retrofit for Service-ability
 Sun CTO: Incremental Open-Sourcing of Java is the Way
 Microsoft Executive Lauds Open Source

Implementing the Atom Publishing Protocol
Joe Gregorio, XML.com
The Atom Publishing Protocol (APP) is nearing completion, many of the design issues have settled down, and there is work being done on implementations and interoperability. Although the interoperability work will go on for years to come, we can put together an implementation and discuss the requirements the APP puts on you, the gotchas, and the ways we can optimize the service. If you've been following along with Restful Web columns at home, you won't be surprised that the implementation is in Python. The Atom Publishing Protocol is an application-level protocol for publishing and editing Web resources using HTTP and XML 1.0. The protocol supports the creation of arbitrary web resources and provides facilities for: (1) Collections: Sets of resources, which may be retrieved in whole or in part; (2) Introspection: Discovering and describing collections; (3) Editing: Creating, updating and deleting resources. The Atom Protocol uses the following HTTP methods: GET is used to retrieve a representation of a resource or perform a query; POST is used to create a new, dynamically- named resource; PUT is used to update a known resource; DELETE is used to remove a resource. Along with operations on resources, the Atom Protocol provides list-based structures, called Collections, for managing and organising resources, called Members. Collections contain the IRIs of, and metadata about, their Member resources. For authoring and editing of resources to commence, an Atom Protocol client can examine Introspection Documents which represent server-defined groups of Collections. This initial article in a series dives into some code, implementing draft -08 of the Atom Publishing Protocol. Future articles in the series will build more complex services on top of this APP implementation.
See also: Atom references

Software Freedom Law Center Gives Thumbs-Up to OpenDocument
Joe 'Zonker' Brockmeier, NewsForge
The Software Freedom Law Center (SFLC) announced that the OpenDocument Format (ODF) standard is OK for use in free software. The opinion letter, written by SFLC chairman Eben Moglen, explains that concern about the format was a result of the Organization for the Advancement of Structured Information Standards (OASIS) standardization process for ODF. Because the OASIS process allows for "standards to be licensed under terms potentially at odds with free software licenses," there was concern that the ODF standard may be incompatible with free software licenses. However, Moglen says that while there's still concern about "technological standards that are incompatible with free software," the ODF standard is not one of them. How did the SFLC get drawn into the discussion? A few SFLC clients, including the Plone Foundation, and a few organizations not affiliated with the SFLC, turned to the SFLC as the most likely resource to make the determination of whether ODF would be free software compatible. Joel Burton, chair of the Plone board foundation, says that the SFLC "are the most trusted people to give this answer."
See also: the Opinion Letter

W3C XForms 1.1 Working Draft
John M. Boyer (ed), W3C Working Draft
W3C's XForms Working Group has released an updated Working Draft for the XForms 1.1 specification. Designed to refine and strengthen the XML processing platform introduced by XForms 1.0, version 1.1 adds several submission capabilities, a more powerful action processing facility, the ability to manipulate data arbitrarily and to access event context information, and adds numerous helpful data types, utility functions, user interface improvements, and action event handlers. According to the editor's blog, this release will be the second to last "thin"spec — a specification describing only new features. The team expects to publish one more thin spec near the end of August 2006, then migrate to a full specification by merging XForms 1.0, the errata, and the new features in the thin specification.
See also: XML and Forms

Java XML Digital Signatures
Sun Java Web Services Team, Technical Report
Extensible Markup Language (XML) technology is now an integral part of web-based business applications. These applications require a fundamentally sound and secure infrastructure to meet the security requirements of confidentiality, endpoint authentication, message integrity, and nonrepudiation. XML signature, XML encryption, XML Key Management Specification (XKMS), Security Assertion Markup Language (SAML), and XML Access Control Markup Language (XACML) are the XML security standards that define XML vocabularies and processing rules to meet these security requirements. This article provides an introduction to XML digital signatures and to the Java XML Digital Signatures APIs (JSR 105). It also supplies information on how to accelerate Java XML digital signature performance using cryptographic hardware accelerators, with focus on the UltraSPARC T1 processor cryptographic acceleration support. Because XML technology has become an integral part of web-based business applications, it is critical that applications meet the security requirements of data integrity, nonrepudiation, and endpoint authentication. The Java XML digital signature implementation provides the infrastructure to meet these security requirements. The Java XML digital signature operations of Sign and Validate are computationally expensive, and more than 30 percent of the CPU time can be spent in doing the actual cryptographic operations. You can use hardware cryptographic accelerators to meet the demanding performance requirements of cryptographic operations. The UltraSPARC T1 processor has a built-in cryptographic accelerator to accelerate the computationally expensive modular arithmetic operations found in PKC algorithms such as RSA and DSA.

What Is Geronimo?
Kunal Jaggi, O'Reilly OnJava.com
Geronimo is the newest Apache-initiated, open source application server. Licensed under the Apache license (version 2.0), Geronimo is a Java EE 1.4 certified app server. Geronimo is not the only open source app server available in the market. There are other open source Java EE app servers out there as well, such as JOnAS from ObjectWeb. However, Geronimo fills a need that other application servers do not. With Geronimo, components can be easily integrated. Its key aim is to support custom builds, geared to the needs of specific applications. Geronimo offers choices. For instance, if you don't want transaction management, you can go for a web-tier container such as Tomcat or Jetty. Geronimo supports the assembly of custom components pretty easily. In short, you can make it whatever you need it to be. This means Geronimo is much more than simply an app server; it offers a framework that can be used to glue together different components. One of the most elegant features of Geronimo is that it doesn't require a restart. Unlike other web- and business-tier containers, which require restarting the container for any configuration change, Geronimo is tailored from the ground up to support dynamic class loading, and keeps running as an uninterrupted service.
See also: Apache Geronimo

Ipedo's EII Platform Gets a Retrofit for Service-ability
Stephen Swoyer, Enterprise Systems
Enterprise Information Integration (EII) specialist Ipedo Inc. last week unveiled an SOA-ready revamping of its bread-and-butter XIP integration platform, complete with a new Web Services Publishing Wizard and requisite support for both SOAP and representational state transfer (REST)-based Web Services. It's an important release for the EII player, which — more so than pure-play rivals (and EII superstars) Composite and MetaMatrix — is under pressure to break free and differentiate itself from the rest of an otherwise teeming pack. And in several key respects, says James Kobielus, a principal analyst for data management with consultancy Current Analysis, XIP 4.2 helps do just that: "Ipedo's SOA and XML/relational features in XIP 4.2 allow it to contend effectively against its nearest pure-play EII rivals [Composite Software and MetaMatrix], which offer equivalent features, and also against IBM." Kobielus points to improvements in XIP 4.2's hybrid XML/relational query engine, which boasts new cost-based query optimization features, pushdown techniques, and join algorithms. XIP's hybrid XML/relational engine remains a key differentiator for Ipedo, but the company's pure-play rivals have also introduced hybrid XML/relational implementations — for modeling, metadata, and even query processing — of their own. Kobielus notes that none of Ipedo's competitors offers REST support as an SOA alternative to SOAP, WSDL, and UDDI.

Sun CTO: Incremental Open-Sourcing of Java is the Way
Paul Krill, InfoWorld
Expect the open-sourcing of the Java programming language to be done in incremental steps, with some pieces available by next June — but not the entire platform, Robert Brewin, co-CTO of Sun Microsystems' software group said. Some components of Java that could be open-sourced in an incremental fashion include the Java virtual machine, the runtime environment, the Web services stack and the Swing GUI components. There has been some discussion about releasing the virtual machine, Swing, and the runtime at the same time. The company has sought to maintain compatibility of the programming language as it pursues an open source road for Java. Sun already has offered Project Glassfish, an implementation of Sun's application server, via an open source format. Also at Sun, the company is eyeing the addition of lightweight REST (Representational State Transfer) Web services and more scripting language support to the Sun Java Studio Creator and NetBeans developer tools; an announcement is expected in four to six weeks. Scripting languages being pondered as part of the effort include JavaScript, Python, and Ruby. The Ruby on Rails Web framework also may be supported.

Microsoft Executive Lauds Open Source
Paul Krill, InfoWorld
David Kaefer, director of Business Development, Intellectual Property and Licensing at Microsoft, said open source had bolstered innovation in a distributed fashion, and he called the open source software movement a "very powerful force in the industry." Microsoft has partnered with the open source community, linking up with companies such as JBoss, SugarCRM and XenSource, Kaefer said. And it is leveraging open source in its Open XML Translator project, which will enable its Office suite to support the OpenDocument Format standard. Emphasizing Microsoft's intention to be more open, Kaefer said, the company is doing more to open up its protocols and license formats, such as its Office format. The company's Shared Source program, for its part, allows access to its code. Microsoft itself is bolstering its efforts in IP (intellectual property) licensing. The company is trying to understand how it can create technologies and find homes for some of those outside the company; the company is exploring inbound IP acquisitions. The company this week announced it has licensed 3-D technology codenamed TouchLight to Eon Reality.


XML.org is an OASIS Information Channel sponsored by BEA Systems, Inc., IBM Corporation, Innodata Isogen, SAP AG and Sun Microsystems, Inc.

Use http://www.oasis-open.org/mlmanage to unsubscribe or change an email address. See http://xml.org/xml/news_market.shtml for the list archives.


Bottom Gear Image