> I understand your desire in making it simple to map this into native
> object-model RPC.
>
> <ed>That is because that is all DSS is !!! A signature creation and
> verification request mechanism.</ed>
>
> I don't share the desire. Or rather, I see that as less important than
> getting a real extensible protocol specified.
>
> <ed>The thinness and therefore value of what is left is scary to me.</ed>
I think I was misunderstood.
I was saying that this doesn't have to be RPC. It can be
document-oriented. I don't see a requirement that the XML messages that
are exchanged must easily and strictly map to a Java, C#, or C++ object
without any intervening work.
It certainly is a synchronous request/response protocol, but it can fit
the new service-oriented architecture as well.
Hope this is more clear.
/r$
--
Rich Salz Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
