Andrew,
I wonder what impact would this change have on
existing implementations of v.3?
Are there any opinions from the
vendors?
Cheers,
Max
----- Original Message -----
From:
Andrew Hately
To:
Sent: Thursday, February 06, 2003 6:55
PM
Subject: [uddi-spec] Change request for
discard transfer token API
Please review the
attached CR-0024. It covers a new API as there is currently no means in
the specification to invalidate a custrody/ownership transfer token. I
view this as an oversight and potential security issue should a
publisher lose track of the opaqueToken, there should be a means to invalidate
the token.
Andrew Hately
IBM
Austin
UDDI Development, Emerging Technologies
