Re: [sca-bindings] [BINDINGS-165] BWS50014 & BWS50015 are optionalnormative statements

Logged as: http://www.osoa.org/jira/browse/BINDINGS-165

    

    -Eric.

    

    On 6/8/11 5:50 AM, Mike Edwards wrote:
    
      
      

      Target:
         sca-wsbinding-1.1-cd04.pdf
        

      

        Description: 
      

      

      BWS50014 & BWS50015 are both
        optional
        normative statements - this gives problems in meeting the exit
        requirements
        and are not acceptable:
      

      

      
        
          

            [BWS50014]
            
            Policies and assertions
                SHOULD be signed
                to prevent tampering.
            
          

          

            [BWS50015]
            
            Policies SHOULD NOT be
                accepted unless they
                are signed and have an associated security token to
                specify the signer
                has proper claims for the given policy.
          

        
      
      

      

      

      Proposal:
      

      

      Make both statements
        non-normative,
        replacing them with the following text:
      

      

      "It is good practice for Policies
        and assertions to be signed to prevent tampering.  
      

      It is advisable that an SCA
        runtime
        does not accept Policies unless they are signed and have an 
      

      associated security token to
        specify
        the signer has proper claims for the given policy."
      

      

      

      
      

      Yours, Mike
      

      
        
          

            
              
            
          

          

            
              

            
          

          

            Dr
                Mike Edwards
            
             Mail Point
                137, Hursley
                Park
            
            
              

            
          

          

            STSM
            
             Winchester,
                Hants SO21
                2JN
            
          

          

            SCA
                & Services
                Standards
            
             United
                Kingdom
            
          

          

            Co-Chair
                OASIS SCA
                Assembly TC
            
             
            
            
              

            
          

          

            IBM
                Software Group
            
              
            
            
              

            
          

          

            Phone:
            
            +44-1962
                818014
            
              
            
            
              

            
          

          

            Mobile:
            
            +44-7802-467431
                (274097)
            
              
            
            
              

            
          

          

            e-mail:
            
            
            
              
            
            
              

            
          

          

             
            
          

          

             
          

        
      
      

      

      
      

      

      
      

        

        
      
Unless stated otherwise
            above:

            IBM United Kingdom Limited - Registered in England and Wales
            with number
            741598. 

            Registered office: PO Box 41, North Harbour, Portsmouth,
            Hampshire PO6
            3AU
      

      

          

        
        

        

        

          

        
        

        

        
      

      

        

        
      
Unless stated otherwise
            above:

            IBM United Kingdom Limited - Registered in England and Wales
            with number
            741598. 

            Registered office: PO Box 41, North Harbour, Portsmouth,
            Hampshire PO6
            3AU