xacml — archive

RE: [xacml] request's attribute assertion lifetime?

From: Daniel Engovatov <[email protected]>
To: [email protected]
Date: Thu, 04 Mar 2004 23:39:00 -0000

 MHonArc v2.5.0b2 -->
















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: RE: [xacml] request's attribute assertion lifetime?




From: "Daniel Engovatov" <[email protected]>
To: "Polar Humenn" <[email protected]>, "Frank Siebenlist" <[email protected]>
Date: Thu, 4 Mar 2004 15:52:19 -0800







>The reason for this approach, is that we did not want XACML to become a
>validation engine.  The business of checking signatures, validity
times,
>handling cryptographic computational complexity, is all out of scope,
and
>that is easily divided and pawned off on some other entity, so XACML
will
>have to complicate is job with those matters.


Yep.  It is the job of the PIP (context handler) to validate whether any
information requested and used by the PDP is valid, including any
timeouts etc.  We do not (and can not) standardize that reliably.

Daniel.









Follow-Ups:

Re: [xacml] request's attribute assertion lifetime?
From: Frank Siebenlist <[email protected]>








[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]