Internetworkers: http://www.ibiblio.org/internetworkers/

["David R. Matusiak" <matusiak AT speakeasy.net>]

<my_interpretation>
this sounds like a nice way to secure business for those companies.
i can see the press releases now:

soon, you will be able to run secure "Web Apps!!" all you will need is some 
IBM 
hardware, so you can run M$ Windows XP Secure Server software, and tie it all 
together with a few nice VeriSign certificates -- and BAM! there you go!! 
secure 
web transactions!!
(oh, and the site you want to "securely communicate" with will have to be 
running the EXACT SAME configuration -or- they cannot talk...)
</my_interpretation>

___  _ _____ . ....
m a h t o o z e e a c k  a t  s p e e k e e z e e  d o t  n e t
------ / / .........     . . .

On Fri, 12 Apr 2002, Michael D. Thomas wrote:

> http://www.extremetech.com/article/0,3396,s=201&a=25395,00.asp
> 
> Spec Secures Web Services Apps
> 
> NEW ORLEANS--Microsoft Corp., IBM and VeriSign Inc. have joined forces to
> develop and publish a new security specification for Web services that will
> form the foundation of its proposed Web services security architecture.
> The specification, which the parties say is the first such spec to be
> launched, will be known as WS-Security and is designed to help organizations
> build secure and broadly interoperable Web services applications.
> 
> The spec is designed to enable message-level, SOAP-level security,
> specifically encryption, authentication and identity around those messages.
> What this will really enable is for Web services to communicate in a trusted
> manner, especially in a scenario where you have multiple actors in a Web
> service, where it will provide end-to-end security between all of those
> parties," Marcie Virdin, a director at VeriSign, told eWEEK in an interview
> late Wednesday.
> 
> WS-Security is thus defined as a standard set of SOAP (Simple Object Access
> Protocol) extensions, or message headers, that can be used to implement
> integrity and confidentiality in Web services applications. It also provides
> standard mechanisms to exchange secure, signed messages in a Web services
> environment. "This provides an important foundation layer for Web services
> security that will help developers build more secure and broadly 
> interoperable
> Web services," she said.