Re: [soa-rm-ra] wrapping up RAF today [was: Security Model-KevinSmith-August4th-kjl - MP.docx]

From
Mike Poulin <>
Date
2012-08-15T15:35:55+00:00
ID
Thread
Re: [soa-rm-ra] wrapping up RAF today [was: Security Model-KevinSmith-August4th-kjl - MP.docx]
Ken
 

 
Those  
  X-NONE 
  X-NONE 
   
    
    
    
    
    
    
    
    
    
   
   
    
    
    
    
    
    
    
    
    
    
    
   
for whom trust of the immediate consumer is not sufficient do not think in services. This is it.
 

 
Regarding  
  X-NONE 
  X-NONE 
   
    
    
    
    
    
    
    
    
    
   
   
    
    
    
    
    
    
    
    
    
    
    
   
The Creative Commons license , I do not deny shared security controls for services, I am saying that consumer-service security is (should be) the default model with possible extensions toward sharing, not the other way around.
 

 
It is useless to struggle against coupling between consumer and service - the coupling comes not from security but from shared semantics and Service Contracts. The latter should be understandable for both participants of interaction _before_ the interaction takes place. Correct?
 

 
- Michael
 

 

 
	 
 
 
	
 
		----- Original Message -----
 
	
 
		From: Ken Laskey
 
	
 
		Sent: 08/15/12 03:36 PM
 
	
 
		To: 
 
	
 
		Subject: [soa-rm-ra] wrapping up RAF today [was: Security Model-KevinSmith-August4th-kjl - MP.docx]
 
	
 
	
 
		
 
			
 
				All,
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				A subset has been working the security section offline and the attached is the current compromise.  I will likely not have time to cut this in before today’s call, and I would prefer to take my time rather than carelessly raising the ire of Word.
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				Please see Peter’s 12 August draft and assume section 5.2 will reflect the edits in the attached.  I would like to approve this content as that which will go forward for full TC adoption, contingent on final editing to incorporate the security edits.  My plan would be to post the final edit ASAP to Kavi and link it with the announcement for the TC meeting in two weeks.  At next week’s RA meeting, we would formally approve and recommend that specific upload for TC consideration and approval.  I believe this will be in keeping with OASIS process.
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				Talk with you soon.
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				Ken
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				---------------------------------------------------------------------------
 
			
 
				 
 
			
 
				 
 
			
 
				Dr. Kenneth Laskey
 
			
 
				 
 
			
 
				 
 
			
 
				MITRE Corporation, M/S H305              phone: 703-983-7934
 
			
 
				 
 
			
 
				 
 
			
 
				7515 Colshire Drive                                    fax:        703-983-1379
 
			
 
				 
 
			
 
				 
 
			
 
				McLean VA 22102-7508
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				From: Kevin Smith [mailto:]
 
				Sent: Wednesday, August 15, 2012 10:21 AM
 
				To: Ken Laskey
 
				Cc: Lublinsky Boris (Nokia-LC/Chicago); 
 
				Subject: Re: Security Model-KevinSmith-August4th-kjl - MP.docx
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				 
 
			
 
				All - I read through the comments and the rewording. I am okay with the rewording in there.. Security could be a book in itself.. I think we could write a whole lot more, but I think it addresses security to the extent that it should as a section in this spec..
 
				
 
				Thanks for all of your help, comments, and suggestions..
 
			
 
				 
 
			
 
				 
 
			
 
				
 
					On Mon, Aug 13, 2012 at 9:26 PM, Ken Laskey <> wrote:
 
				
 
					 
 
				
 
					 
 
				
 
					
 
						
 
							Gentlemen,
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							I responded to many of the comments by adding to the comment and highlighting in yellow.
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							Boris – I noted agreement with several of your comments but have no idea how to handle without significantly expanding the discussion.  Any specific words you want to add will be appreciated and considered.
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							Michael – I appreciate your problem with section 5.2.5.1 and the yellow highlighting shows my attempt to address.
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							Kevin – Welcome back.  The section 5.2.5.1 questions follow other discussions we’ve had.  I would like to address Michael’s concerns but not end up in a rat hole.  
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							All – let’s converge quickly and call it a wrap.
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							Ken
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							
 
								---------------------------------------------------------------------------
 
							
 
								 
 
							
 
								 
 
							
 
								Dr. Kenneth Laskey
 
							
 
								 
 
							
 
								 
 
							
 
								MITRE Corporation, M/S H305              phone: 703-983-7934
 
							
 
								 
 
							
 
								 
 
							
 
								7515 Colshire Drive                                    fax:        703-983-1379
 
							
 
								 
 
							
 
								 
 
							
 
								McLean VA 22102-7508
 
							
 
								 
 
							
 
								 
 
						
 
						
 
							 
 
						
 
							 
 
						
 
							 
 
						
 
							
 
								
 
									From: Lublinsky Boris (Nokia-LC/Chicago) [mailto:]
 
									Sent: Monday, August 13, 2012 6:32 PM
 
									To: Michael Poulin () (); Ken Laskey (); 
 
									Subject: Security Model-KevinSmith-August4th-kjl - MP.docx
 
								
 
									 
 
								
 
									 
 
							
 
						
 
						
 
							
 
								 
 
							
 
								 
 
							
 
								 
 
							
 
								Some additional comments
 
							
 
								 
 
							
 
								 
 
							
 
								 
 
							
 
								 
 
							
 
								 
 
							
 
								
 
									 
								
 
							
 
							
 
								The information contained in this communication may be CONFIDENTIAL and is intended only for the use of the recipient(s) named above. If you are not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication, or any of its contents, is strictly prohibited. If you have received this communication in error, please notify the sender and delete/destroy the original message and any copy of it from your computer or paper files.