OASIS ebXML Messaging Services TC

Re: CPA & MS (was RE: Threat assessment,some dissent RE: [ebxml-msg] security pro blem with ebXML MS)

  • 1.  Re: CPA & MS (was RE: Threat assessment,some dissent RE: [ebxml-msg] security pro blem with ebXML MS)

    Posted 11-12-2001 17:15
    
    Suresh,
    
    I'm not sure I understand what you really want to know.
    
    I previously said that I know of no other contract besides CPA.  By that I
    meant an electronic contract that specifies the agreed IT technical
    configuration.  Of course, there is tpaML but tpaML was just a proof of
    concept that led to CPP-CPA.  "Other contract + MS" would not work only
    because there is no other contract.  Web Services does not include a
    contract;  WSDL is strictly a service provider description, not an
    agreement.
    
    "CPA + other transport" is conceptually possible but we have not defined
    the bindings for another transport that would replace the ebXMLBinding
    subtree.  The obvious possibility would be "bare SOAP".
    
    It is perfectly reasonable for the registry spec to permit other types of
    contract.  They just don't exist at this time, as far as I know.
    
    Regards,
    Marty
    
    *************************************************************************************
    
    Martin W. Sachs
    IBM T. J. Watson Research Center
    P. O. B. 704
    Yorktown Hts, NY 10598
    914-784-7287;  IBM tie line 863-7287
    Notes address:  Martin W Sachs/Watson/IBM
    Internet address:  mwsachs @ us.ibm.com
    *************************************************************************************
    
    
    
    "Damodaran, Suresh" <Suresh_Damodaran@stercomm.com> on 11/12/2001 04:09:55
    PM
    
    To:    Martin W Sachs/Watson/IBM@IBMUS
    cc:    "'Dale Moberg'" <dmoberg@cyclonecommerce.com>, James M Galvin
           <galvin@drummondgroup.com>, Christopher Ferris
           <chris.ferris@sun.com>, Rich Salz <rsalz@zolera.com>,
           ebxml-msg@lists.oasis-open.org
    Subject:    CPA & MS (was RE: Threat assessment, some dissent RE:
           [ebxml-msg]       security pro     blem with ebXML MS)
    
    
    
    Marty,
    
    Thanks for responding to this question.
    I have a follow-up question.
    
    Within Registry TC, we spec'ed Registry to
    work with any type of contract.
    I would guess
     CPA + MS
     Other contract + other (non MS) transport
     CPA + other (non MS) transport (is it possible?
    would be the only viable combinations as per CPA spec?
    
    In particular,
     Other contract + MS
    would not work (as per your statements below).
    Please confirm.
    
    Regards,
    -Suresh