RE: suggestions for ongoing ebXML work and security

[Krishna Sankar <ksankar@cisco.com>]

MH,
	Good ideas. Couple of observations:

>> i.	The R&R team needs to specify the security model for data access but
should look to the SAML group for detailed
>> specification on access control language

	The access control language is the work of XACML. I think the assertions
could follow the SAML and any access control language could follow the
XACML.

Agree with the XKMS and WSDL. Hopefully the CPP and WSDL becomes congruent
in more than the Security aspects.

cheers and good night (It is 12:46 AM here in CA)

> -----Original Message-----
> From: Maryann Hondo [mailto:mhondo@us.ibm.com]
> Sent: Monday, May 07, 2001 10:32 PM
> To: eva.cy.cheng@email.chinatrust.com.tw; per.myrseth@pki.no;
> aboseman2@aol.com; tmcgrath@tedis.com.au;
> ebxml-ta-security@lists.ebxml.org; ebxml-architecture@lists.ebxml.org;
> knaujok@home.com; sutor@us.ibm.com
> Subject: suggestions for ongoing ebXML work and security
>
>
> All,
>
> In the team meeting today we discussed and agreed to the following
> suggestions for how security
> topics can be addressed in followon ebxml activities.
>
> Comments welcome.
>
> Maryann
>
>
> (See attached file: Security Team Recommendations for Ongoing ebXML
> Activities.doc)
>