Generally looks good.

Nits:
-	Need to update OGF copyright to 2007, 2008
-	I find it generally good practice to include references on first referral to external standards. The intro mentions a 
whole list of standards you rely on by short identifier only (WS-Addressing, WS-SecurityPolicy, SSL/TSL, WS-Security, …
.). Appears WS-Addressing is missing from normative refs.
-	In  Section 4, Initiator and Resource are initial caps only while in secure communication they are all CAPS. 
Consistent style is good.

Section 6
-	I believe you should require all secure addresses to be signed.  A number of bad things can happen to clients who rely
 on secure-addresses which have been tampered with as I mentioned in my comments on the secure-communications draft.