Re: WSS4J - SAML - SRP

[Davanum Srinivas <di...@yahoo.com>]

Flavio,

Forwarding email to the mailing list.

-- dims

--- Fl�vio_de_Oliveira_Silva <fl...@facom.ufu.br> wrote:
> Dear Davanum Srinivas,
> 
> As a participant of axis-user and axis-dev mailing lists I am always
> receiving messages from you. Researching about web services security I found
> the WSS4J project and considering you involvement with Web Services and
> AXIS, I decided to send you this e-mail.
> 
> My name is Flavio Silva, and I am a professor at Federal University of
> Uberl�ndia (Brazil).
> 
> I am finishing my MSc thesis and I am proposing an implementation of SRP
> (Secure Remote Password) protocol in order to improve access control to AXIS
> based web services.
> 
> Researching the initiatives in the security area I found information about
> SAML; OpenSAML; WS-SECURITY and WSS4J.
> 
> This research is important because I am doing a job in order to contribute,
> not reinvent the wheel.
> 
> One approach could be a handler that would be in the AXIS message path, but
> in my opinion, this solution does not rely on any ws security �standard� and
> this is a weakness.
> 
> As you know there are a lot of proposals and work in the security area, and
> considering your experience, I would like to ask you, what would be a nice
> way to implement this password protocol in order to work with Apache Axis,
> using ws security �standards�?
> 
> By the way, I would like to get involved with WSS4J project. How can I
> participate?
> 
> I have more than 10 years of experience in computing and OOP; Java;
> Networking and Web Services are my areas of interest.
> 
> Finally I would like to thank you attention and you help
> 
> Best regards,
> 
> FL�VIO DE OLIVEIRA SILVA
> COMPUTING SCHOOL
> FEDERAL UNIVERSITY OF UBERL�NDIA
> UBERL�NDIA, MG - BRAZIL
> 
> 
> 
> 
> 
> 
> 


=====
Davanum Srinivas - http://webservices.apache.org/~dims/