Richard Karpinski at Internetweek:

• Will WS-Security have broad support among actual security vendors? (Yes)
• Does WS-Security answer all the security needs for XML-based Web services? (No)
• Where will additional specifications come from? (IBM and Microsoft, if they can have their way.)
• Has OASIS replaced the W3C as most important Web services standards body? (Sure looks that way.)
• And does WS-Security play well with another key security standard, Secure Assertions
• Markup Language (SAML)? (Technically, yes; politically, we'll see.) "

An insightful view on technical and political background of WS-Security.

8:19:25 PM