Document Details (Active Version)
Document Name: Secure Addressing Profile 1.0 Document ID: doc14938 Description: The WS-Addressing 1.0 – Core [WS-Addressing] specification is often used to address Web Service –based resources using endpoint reference (EPR) data structures. The WS-Addressing definition of the EPR describes the encapsulation of the network protocol and endpoint information for a given resource, but does not specifically indicate how the EPR can also be used to convey the secure communication mechanisms (and ancillary security tokens) required by that resource. Such security requirements can be described using WS-Security Policy 1.2 policy documents. This profile document normatively refines the WS-Addressing 1.0 – Core specification in order to facilitate the inclusion of such WS-SecurityPolicy assertions within WS-Addressing endpoint references. It is often the case that WS-Addressing EPRs may be stored and exchanged by any number of intermediaries (such as directory services) before being consumed for actual communication. With this in mind, a particular interaction scenario may require guarantees of trust regarding the identity of the minter and the integrity of the EPR. This document also normatively describes how XML-Signature should be used provide such guarantees. Version Comment: Fixed typo, accepted all changes (made clean). Version Created By: Duane Merrill - 05/01/2008 10:59 AM EDT	Status: Final Current Version: 9 Size: 261.5 KB Lock:  Unlocked

	Versions		Associations		Review

	Active	Version	Version Comment	Review	Created By	Status
		Version 9	Fixed typo, accepted all changes (made clean).		Duane Merrill - 05/01/2008	Final
		Version 8	Updated to reflect the comments from Public Comment. Changes include: - Minor edits to introduction - The Profile now mandates digital signature of EPRs bearing security policy - Minor edits to conformance targets to reflect WS-SecurityPolicy's notion of endpoint and operation policy subjects -Added minor security discussion recommending temporal and path validation of signing tokens -Other minor edits		Duane Merrill - 04/21/2008	Draft
		Version 7	Minor linguistic edits as per Blair's comments		Duane Merrill - 12/27/2007	Draft
		Version 6	Add reference to WS-S X509 token profile. Replace spec table in appendix B.		Hiro Kishimoto - 12/17/2007	Draft
		Version 5	Minor edits for Hiro's suggestions		Duane Merrill - 11/27/2007	Draft
		Version 4	My comments in-line.		Hiro Kishimoto - 11/25/2007	Draft
		Version 3	003: Updates for filename and registered trademark fixes		Duane Merrill - 11/19/2007	Draft
		Version 2	Fixed typo		Duane Merrill - 11/19/2007	Draft
		Version 1			Duane Merrill - 11/19/2007	Draft

Return     Open Document     < Previous     Next >