W3C

Testimonials for XKMS 2.0 Recommendation

These testimonials are in support of W3C issuance of XKMS 2.0 as a W3C Recommendation.


DataPower'sXS40 XML Security Gateway has long supported XKMS since early 2003. Asthe most widely deployed XML Web services security gateway among theGlobal 1000 and large government agencies, our extensive experience hasdemonstrated that XML Web services are a highly effective way to offerapplication security as a service to achieve 'separation of concerns'best practices and reduce the complexity of Web services security. Inthis way, XKMS 2.0 aims to improve PKI deployments and simplifyapplication security by moving digital-signature handling and encryptionout of the applications themselves and provide PKI as an easy-to-useservice instead.
-- Rich Salz, Chief Security Architect, DataPower
XKMS provides PKI integration capabilities that will facilitate and accelerate the adoption of Web services. Oracle was pleased to provide a reference implementation for the XKMS 2.0 specification; we look forward to supporting the specification in Oracle Application Server as XKMS gains widespread deployment.
-- Donald Deutsch, Vice President, Standards Strategy and Architecture, Oracle Corporation
In 2002, the W3C's release of the XML Signature and XML Encryption Recommendations led the way in making it much easier, thanks to XML, to integrate cryptography into applications. However, until now, application developers still had to use challenging, non-XML protocols for the key management aspects of cryptography. Now thanks to the W3C XML Key Management Specification (XKMS) Version 2.0 Recommendation which defines straight-forward XML messages and protocols for key management, the last major hurdle to fully enabling XML-based data security has been removed. As a past participant of the W3C XKMS working group, XMLsec congratulates the W3C on its release of the XKMS 2.0 Recommendation.
-- Ed Simon, President and CEO, XMLsec Inc.

About the World Wide Web Consortium [W3C]

The W3C was created to lead the Web to its full potential by developing common protocols that promote its evolution and ensure its interoperability. It is an international industry consortium jointly run by the MIT Computer Science and Artificial Intelligence Laboratory (MIT CSAIL) in the USA, the European Research Consortium for Informatics and Mathematics (ERCIM) headquartered in France and Keio University in Japan. Services provided by the Consortium include: a repository of information about the World Wide Web for developers and users, and various prototype and sample applications to demonstrate use of new technology. Nearly 400 organizations are Members of W3C. To learn more, see the W3C Web site: http://www.w3.org/