Re: [security-services] Comments on Tech Overview rev 13 - Tom Scavo - org.oasis-open.lists.security-services

14 messages in org.oasis-open.lists.security-servicesRe: [security-services] Comments on T...

From	Sent On	Attachments
Eve L. Maler	Mar 4, 2007 8:56 pm
Tom Scavo	Mar 5, 2007 7:25 am
Eve L. Maler	Mar 5, 2007 8:55 am
Tom Scavo	Mar 10, 2007 9:33 am
Eve L. Maler	Mar 11, 2007 8:45 pm
Tom Scavo	Mar 12, 2007 6:39 am
Paul Madsen	Mar 26, 2007 7:57 am
Paul Madsen	Mar 26, 2007 8:21 am
Tom Scavo	Mar 26, 2007 9:24 am
Paul Madsen	Jul 19, 2007 6:31 am
Tom Scavo	Jul 19, 2007 10:07 am
Paul Madsen	Jul 19, 2007 10:20 am
Tom Scavo	Jul 19, 2007 11:26 am
Paul Madsen	Jul 19, 2007 2:08 pm

Subject:	Re: [security-services] Comments on Tech Overview rev 13
From:	Tom Scavo (trsc...@gmail.com)
Date:	Jul 19, 2007 11:26:42 am
List:	org.oasis-open.lists.security-services

It was awhile ago, but if I recall, Scott subsequently corrected me (and I think he's right).

Tom

On 7/19/07, Paul Madsen <paul...@rogers.com> wrote:

Thaks Tom, that would be my view as well - but in the past thread you appear to be arguing the opposite for the 'resource' steps :-)

--------------------------------------------------------------------------------------------------- Tom Scavo wrote

Eve wrote

- Sec 4.1.2, Figure 12 (and globally throughout all the figures): I suspect the arrow for step 1, "Access resource", is supposed to be dotted, not solid, because it's out of band for SAML. (This is probably a bug of long standing -- I'm sorry!)

My interpretation is just the opposite. By all indications, steps 1 and 7 are in band and in scope. In particular, see sections 4.1.3.1 and 4.1.3.6 in SAMLProf.

Tom Scavo wrote:

Paul, I think a dotted line should signify a step that is out of scope. In that case, all four of the steps you mentioned would be represented by dotted lines, I believe.

That's my two cents worth, anyway. :-)

On 7/19/07, Paul Madsen <paul...@rogers.com> wrote:

Finally getting to my graphic editing AI

The various sequence diagrams have some or all of the following message steps

- Access Resource - Challenge for credentials - User Login - Supply resource

Was it the agreement that the first & last are to be drawn as solid lines? And the middle 2 as dotted?

Tom Scavo wrote:

On 3/11/07, Eve L. Maler <Eve....@sun.com> wrote:

I personally don't think we need to hew to this rule.

That's fine. It's mostly pedagogical and not worth quibbling about in general. I personally find this to be a useful rule when writing documentation and so forth since it leads to reasonably complete end-to-end flows that novices can understand.

I'm game to change it -- if Paul feels like doing the graphic editing! But I don't feel it's absolutely essential unless something thinks we're making it more confusing this way.

I'm okay with the single "swoopy arrow" :-) but did we agree that steps 1 and 7 should be represented by a solid line? That's my main concern.

	Start a set with this search
	Include this search in one of my sets
	Exclude this search from one of my sets