Issue 4 - SC recommendations

[Marc Goodner <mgoodner@microsoft.com>]

Here are the recommendations for addressing issue 4 for SC. The recommendations for Trust and SP should follow soon and will be consistent with this list.

Issue 4 Reference Recommendations

WS-SecureConversation

ED-01 rev 06

Normative

[RFC2119] S. Bradner, "Key words for use in RFCs to Indicate Requirement Levels", RFC 2119, Harvard University, March 1997.

http://www.ietf.org/rfc/rfc2119.txt

 

[RFC2246] IETF Standard, "The TLS Protocol", January 1999.

http://www.ietf.org/rfc/rfc2246.txt

Line 338 first occurrence, line 742 first normative occurrence.

Recommend keeping as BSP references this version.

 

[SOAP] W3C Note, "SOAP: Simple Object Access Protocol 1.1", 08 May 2000.

http://www.w3.org/TR/2000/NOTE-SOAP-20000508/

 

[SOAP12] W3C Recommendation, "SOAP 1.2 Part 1: Messaging Framework", 24 June 2003.

http://www.w3.org/TR/2003/REC-soap12-part1-20030624/

 

[URI] T. Berners-Lee, R. Fielding, L. Masinter, "Uniform Resource Identifiers (URI): Generic Syntax", RFC 3986, MIT/LCS, Day Software, Adobe Systems, January 2005.

http://www.ietf.org/rfc/rfc3986.txt

Line 54 first occurrence, lines 91/92 first referenced and normative occurrence.

Recommend using RFC 3986 which made 2396 obsolete on grounds that SP uses 3986.

 

[WS-Addressing] W3C Recommendation, "Web Services Addressing (WS-Addressing)", 9 May 2006.

http://www.w3.org/TR/2006/REC-ws-addr-core-20060509

Used in namespace prefix table and throughout examples and exemplars. Not referenced explicitly in text. Should be on line 309 describing Action URIs.

Recommend using Recommendation rather than Submission version as the TC interop event has.

 

[WS-Security]

OASIS Standard, "OASIS Web Services Security: SOAP Message Security 1.0 (WS-Security 2004)", March 2004.

OASIS Standard, "OASIS Web Services Security: SOAP Message Security 1.1 (WS-Security 2004)", February 2006.

 

Used throughout spec.

Update to include version 1.1.

 

[WS-Trust] "Web Services Trust Language", tbd

Update to TC version.

Line 138 first normative reference.

 

[XML-Encrypt] W3C Recommendation, "XML Encryption Syntax and Processing", 10 December 2002.

http://www.w3.org/TR/2002/REC-xmlenc-core-20021210/

Line 330, needs reference added.

Note link is updated, spec used an old WD link.

 

[XML-Signature] W3C Recommendation, "XML-Signature Syntax and Processing", 12 February 2002.

http://www.w3.org/TR/2002/REC-xmlenc-core-20021210/

Referred to throughout via use of “sign”, “integrity” and the namespace prefix ds. Recommend adding reference to definition of Signature on line 68.

 

[XML-Schema1] W3C Recommendation, "XML Schema Part 1: Structures Second Edition", 28 October 2004.

http://www.w3.org/TR/2004/REC-xmlschema-1-20041028/

Implicit should be referenced in section 1.4 defining schema file. Recommend using 2^nd edition as SP does.

 

[XML-Schema2] W3C Recommendation, "XML Schema Part 2: Datatypes Second Edition", 28 October 2004.

http://www.w3.org/TR/2004/REC-xmlschema-2-20041028/

Implicit should be referenced in section 1.4 defining schema file. Recommend using 2^nd edition as SP does.

Non-Normative

[WS-MetadataExchange] "Web Services Metadata Exchange (WS-MetadataExchange)", BEA, Computer Associates, IBM, Microsoft, SAP, Sun Microsystems, Inc., webMethods, September 2004.

http://schemas.xmlsoap.org/ws/2004/09/mex/

One reference as an example on line 1156.

 

[WS-Policy] W3C Member Submission "Web Services Policy 1.2 - Framework", 25 April 2006.

http://www.w3.org/Submission/2006/SUBM-WS-Policy-20060425/

 

[WS-PolicyAttachment] "Web Services Policy 1.2 - Attachment", BEA, IBM, Microsoft, SAP, Sonic Software, Verisign, 25 April 2006.

http://www.w3.org/Submission/2006/SUBM-WS-PolicyAttachment-20060425/

 

Lower case “services policy” is used in many places in spec, i.e. line 189. Should be referred to here as an example. Suggest keeping and updating reference to W3C submission.

Remove

[WS-SecurityPolicy] "Web Services Security Policy Language", IBM, Microsoft, RSA Security, VeriSign, December 2002.

Not used.

 

[XML-C14N] W3C Candidate Recommendation, "Canonical XML Version 1.0", 26 October 2000.

Not used.

 

[XML-ns] W3C Recommendation, "Namespaces in XML", 14 January 1999.

Not used, implicit.