OASIS Stamps Approval on WS-Security 1.1

Posted on by

OASIS has announced the approval of WS-Security v1.1 as an OASIS Standard. The 1.1 specification, crafted by the Web Services Security (WSS) Technical Committee, is highlighted by enhancements to security token support, message attachments and rights management. The 1.0 version became a formal standard in April 2004. The 1.1 specification includes the core WS-Security specification and the Username Token Profile 1.1, X.509 Token Profile 1.1, Kerberos Token Profile 1.1, SAML Token Profile 1.1, Rights Expression (REL) Token Profile 1.1, SOAP With Attachments (SWA) Profile 1.1 and Schema 1.1. With WS-Security, users have a general-purpose method for building integrity, confidentiality and authentication into the message exchanges between or among Web services applications. The protocol fosters integration of technology used to secure messages, including X.509 certificates and Kerberos. Coupled with extensions such as WS-Policy, WS-Trust and WS-Secure Conversation, the specification allows more sophisticated and secure ways for Web services to interact. (Hat tip: Robin Cover’s XML.org Daily Newslink)

Links of interest:

oasis, ws-security, webservices, web+services, saml, swa, x.509, ws-policy, ws-trust, ws-secure, microsoft, oracle, sun

Advertisement