Document Name:
|
Secure Addressing Profile 1.0
|
Document ID: |
doc14938 |
Description: |
The WS-Addressing 1.0 – Core [WS-Addressing] specification is often used to address Web Service –based resources using endpoint reference (EPR) data structures. The WS-Addressing definition of the EPR describes the encapsulation of the network protocol and endpoint information for a given resource, but does not specifically indicate how the EPR can also be used to convey the secure communication mechanisms (and ancillary security tokens) required by that resource. Such security requirements can be described using WS-Security Policy 1.2 policy documents. This profile document normatively refines the WS-Addressing 1.0 – Core specification in order to facilitate the inclusion of such WS-SecurityPolicy assertions within WS-Addressing endpoint references.
It is often the case that WS-Addressing EPRs may be stored and exchanged by any number of intermediaries (such as directory services) before being consumed for actual communication. With this in mind, a particular interaction scenario may require guarantees of trust regarding the identity of the minter and the integrity of the EPR. This document also normatively describes how XML-Signature should be used provide such guarantees.
|
Version Comment: |
Fixed typo, accepted all changes (made clean). |
Version Created By: |
Duane Merrill - 05/01/2008 10:59 AM EDT |
|
Status: |
Final |
Current Version: |
9
|
Size: |
261.5 KB |
Lock: |
Unlocked
|
|