Changes between Version 6 and Version 7 of TI12_Security/Security0612


Ignore:
Timestamp:
12/12/06 14:20:09 (13 years ago)
Author:
pjkersha
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • TI12_Security/Security0612

    v6 v7  
    55   * Uses WS-Security digital signature 
    66   * confidentiality using SSL - easier than getting WS-Security encryption working between !WebSphere and python 
    7    * Although the WS-Security standard is established the tooling has not reached full maturity.  With WebSphere, you can do most of what you want but it is a subset of the full standard. 
     7   * Although the WS-Security standard is established the tooling has not reached full maturity.  With !WebSphere, you can do most of what you want but it is a subset of the full standard. 
    88 * Carried out a major update of python  web services from ZSI version 1.6 to 2.0 rc3.  This includes using doc/literal wrapped style WSDL.  Also, now using Twisted resource framework for python web server. 
    99 * Python !MyProxy client complete barring integration and completion of unit tests. 
    1010 * Eggifying security: separated security into client and server packages which can be deployed separately.  Still some way from completion and there are problems eggifying some packages notably Twisted. 
    1111 
    12 == DEWS Security Critical Path and resource allocation (applicable to NDG also) == 
     12== Issues == 
     13 * Securing http redirects.  (See ticket [#266]) 
     14 
     15== DEWS Security Critical Path (applicable to NDG also) == 
    1316This is a summary of the remaining tasks for completion of NDG security for DEWS and amounts to around two months effort. 
    1417 
     
    3639   1. Scripting to create security scripts for security bin directory (there's a standard egg way of doing this) 
    3740 1. DEWS Auditing and Logging. Security will need to interact with the Lost Wax logging service.  Note that this can be done after delivery of the security package and done as an update. 
    38  1. Interface with LostWax logging service 
     41 1. Interface with !LostWax logging service 
    3942 1. Remaining documentation for DEWS auditing logging workpackage  
    4043