Issue 36: WS-Trust pre-authentication

Tracked as issue 36.

 

Marc Goodner

Technical Diplomat

Microsoft Corporation

Tel: (425) 703-1903

Blog: http://spaces.msn.com/mrgoodner/ 

From: Frederick Hirsch
[mailto:] 

Sent: Monday, February 20, 2006
2:16 PM

To: 

Cc: Hirsch Frederick; Marc Goodner

Subject: [ws-sx] New Issue:
WS-Trust pre-authentication

 

PLEASE DO NOT REPLY TO THIS EMAIL OR START A DISCUSSISON THREAD UNTIL
THE ISSUE IS ASSIGNED A NUMBER.  

The issues coordinators will notify the list when that has occurred.

 

Protocol:  ws-trust 

 

See ws-trust-1.3-spec-ed-01-r03-diff.doc
at  http://www.oasis-open.org/apps/org/workgroup/ws-sx/download.php/16566/ws-trust-1.3-spec-ed-01-r03-diff.doc

 

Artifact:  spec 

 

Type: editorial

 

Title: Clarify term pre-authentication

 

Description:

 

Is "pre-authentication" a
well defined term? What does it mean to pre-authenticate using SSL/TLS? 

 

Related issues: none

 

Proposed Resolution:

 

At Line 232, section 2.

Add sentence "Authenticating
the server at the transport layer can mitigate the risk of spoofed
servers." 

 

 

regards, Frederick

 

Frederick Hirsch

Nokia