Re: [wsrp-wsia] [change request #140] Add PortletDescription.onlySecure? - Subbu Allamaraju - org.oasis-open.lists.wsrp-wsia

310 messages in org.oasis-open.lists.wsrp-wsiaRe: [wsrp-wsia] [change request #140]...

From	Sent On	Attachments
116 earlier messages
Rich Thompson	Jan 27, 2003 6:21 am
Rich Thompson	Jan 27, 2003 6:28 am
Rich Thompson	Jan 27, 2003 7:00 am
Rich Thompson	Jan 27, 2003 7:01 am
Rich Thompson	Jan 27, 2003 7:03 am
Rich Thompson	Jan 27, 2003 7:06 am
Rich Thompson	Jan 27, 2003 7:08 am
Rich Thompson	Jan 27, 2003 7:12 am
Rich Thompson	Jan 27, 2003 7:14 am
Rich Thompson	Jan 27, 2003 7:20 am
Rich Thompson	Jan 27, 2003 7:22 am
Rich Thompson	Jan 27, 2003 7:25 am
Rich Thompson	Jan 27, 2003 8:41 am
Rich Thompson	Jan 27, 2003 8:44 am
Rich Thompson	Jan 27, 2003 8:46 am
Rich Thompson	Jan 27, 2003 8:48 am
Rich Thompson	Jan 27, 2003 8:51 am
Rich Thompson	Jan 27, 2003 8:53 am
Rich Thompson	Jan 27, 2003 8:56 am
Subbu Allamaraju	Jan 27, 2003 9:05 am
Rich Thompson	Jan 27, 2003 5:50 pm
Rex Brooks	Jan 28, 2003 6:39 am
Rich Thompson	Jan 28, 2003 12:41 pm
Rich Thompson	Jan 28, 2003 12:43 pm
Rich Thompson	Feb 6, 2003 11:30 am
Rich Thompson	Feb 7, 2003 7:02 am
Rich Thompson	Feb 7, 2003 7:10 am
Michael Freedman	Feb 9, 2003 6:19 pm
Eilon Reshef	Feb 10, 2003 9:39 pm
Rich Thompson	Feb 11, 2003 11:19 am
Rich Thompson	Feb 11, 2003 11:19 am
Rich Thompson	Feb 12, 2003 7:07 am
Rich Thompson	Feb 12, 2003 7:09 am
Rich Thompson	Feb 12, 2003 7:12 am
Rich Thompson	Feb 12, 2003 7:15 am
Rich Thompson	Feb 12, 2003 8:35 am
Rich Thompson	Feb 12, 2003 8:44 am
Rich Thompson	Feb 12, 2003 8:47 am
Rich Thompson	Feb 12, 2003 8:54 am
Rich Thompson	Feb 12, 2003 9:06 am
Michael Freedman	Feb 12, 2003 10:56 am
Michael Freedman	Feb 12, 2003 11:04 am
Rich Thompson	Feb 12, 2003 11:43 am
Michael Freedman	Feb 12, 2003 11:47 am
Rich Thompson	Feb 12, 2003 12:04 pm
Michael Freedman	Feb 12, 2003 6:15 pm
Andre Kramer	Feb 13, 2003 3:14 am
Andre Kramer	Feb 13, 2003 3:40 am
Andre Kramer	Feb 13, 2003 4:03 am
Subbu Allamaraju	Feb 13, 2003 10:54 am
Rich Thompson	Feb 13, 2003 10:55 am
Alejandro Abdelnur	Feb 13, 2003 11:02 am
Michael Freedman	Feb 13, 2003 11:30 am
Michael Freedman	Feb 13, 2003 12:01 pm
Alejandro Abdelnur	Feb 13, 2003 1:29 pm
Michael Freedman	Feb 13, 2003 2:03 pm
Alejandro Abdelnur	Feb 13, 2003 2:27 pm
Eilon Reshef	Feb 13, 2003 2:37 pm
Eilon Reshef	Feb 13, 2003 2:37 pm
Michael Freedman	Feb 13, 2003 3:56 pm
Michael Freedman	Feb 13, 2003 3:58 pm
Andre Kramer	Feb 14, 2003 1:17 am
Rich Thompson	Feb 14, 2003 10:26 am
Rich Thompson	Feb 14, 2003 11:01 am
Subbu Allamaraju	Feb 14, 2003 11:09 am
Rich Thompson	Feb 14, 2003 12:26 pm
Rich Thompson	Feb 14, 2003 12:42 pm
Richard Jacob	Feb 17, 2003 1:09 am
Rich Thompson	Feb 18, 2003 11:42 am
Rich Thompson	Feb 18, 2003 11:56 am
Rich Thompson	Feb 18, 2003 12:03 pm
Rich Thompson	Feb 18, 2003 12:56 pm
Michael Freedman	Feb 18, 2003 3:12 pm
Rich Thompson	Feb 19, 2003 5:42 am
Rich Thompson	Feb 19, 2003 7:24 am
Rich Thompson	Feb 19, 2003 7:40 am
Rich Thompson	Feb 19, 2003 7:46 am
Rich Thompson	Feb 19, 2003 7:53 am
Rich Thompson	Feb 19, 2003 7:55 am
Rich Thompson	Feb 19, 2003 8:02 am
Rich Thompson	Feb 19, 2003 8:07 am
Rich Thompson	Feb 19, 2003 8:12 am
Rich Thompson	Feb 19, 2003 8:16 am
Rich Thompson	Feb 19, 2003 8:21 am
Rich Thompson	Feb 19, 2003 8:24 am
Rich Thompson	Feb 19, 2003 8:27 am
Rich Thompson	Feb 19, 2003 8:30 am
Rich Thompson	Feb 19, 2003 8:33 am
Rich Thompson	Feb 19, 2003 8:55 am	.bin, .bin
Michael Freedman	Feb 19, 2003 8:56 am
Rich Thompson	Feb 19, 2003 11:43 am
Rich Thompson	Feb 20, 2003 6:40 am
Rich Thompson	Feb 20, 2003 6:43 am
Michael Freedman	Feb 20, 2003 1:57 pm
Michael Freedman	Feb 20, 2003 2:04 pm
Andre Kramer	Feb 21, 2003 1:30 am
Rich Thompson	Feb 21, 2003 4:25 am
Rich Thompson	Feb 21, 2003 4:31 am
Rich Thompson	Feb 21, 2003 4:36 am
Andre Kramer	Feb 21, 2003 4:53 am
94 later messages

Subject:	Re: [wsrp-wsia] [change request #140] Add PortletDescription.onlySecure?
From:	Subbu Allamaraju (sub...@bea.com)
Date:	Feb 13, 2003 10:54:26 am
List:	org.oasis-open.lists.wsrp-wsia

This flag would let the producer enforce some level of transport-guaratee irrespetive of how a link was created, and what scheme the consumer used to communicate with the producer.

I see it being similar to transport-guarantee settings in webapps, and when a guaratee is specified, the container (the producer) can refuse to serve the request when the guarantee is met.

Regards,

Subbu

Andre Kramer wrote:

Such a simple flag would help a consumer pick https bindings to talk to the producer, ensuring that at least some secure Portlets are likely to be secure.

-----Original Message----- From: Rich Thompson [mailto:ric...@us.ibm.com] Sent: 12 February 2003 16:55 To: wsrp...@lists.oasis-open.org Subject: [wsrp-wsia] [change request #140] Add PortletDescription.onlySecure?

Document: Spec Section: 5.1.11 Page/Line: 20/14 Requested by: Mike Freedman Old text: New text: [O] boolean onlySecure

Reasoning: At the last F2F we removed setting of security requirements from none, some, all in deference for only supporting some. There is value to the consumer in knowing that a portlet runs entirely in secure mode -- e.g. a portal may signify this portlet in a special way in the portlet respository/toolbox and only allow it to be added to "secure" pages. Shouldn't we allow a portlet to signify this? Note: doing so puts us in tighter alignment with JSR 168 which allows this information to be declared/specified.

[RT] My understanding of the F2F discussions was that one only needed to know the security for the "default" markup (e.g. for the initial page). After that, the page must be secure if any of the portlets has a current indication that secure communication is required and is allowed to be unsecure only if there are no portlets with such current indicators.

	Start a set with this search
	Include this search in one of my sets
	Exclude this search from one of my sets