<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://www.w3.org/Bugs/Public/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4"
          urlbase="https://www.w3.org/Bugs/Public/"
          
          maintainer="sysbot+bugzilla@w3.org"
>

    <bug>
          <bug_id>3616</bug_id>
          
          <creation_ts>2006-08-22 20:11:44 +0000</creation_ts>
          <short_desc>Policy Negotiation</short_desc>
          <delta_ts>2007-09-26 16:52:49 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WS-Policy</product>
          <component>Framework</component>
          <version>FPWD</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>WONTFIX</resolution>
          
          
          <bug_file_loc>http://lists.w3.org/Archives/Public/public-ws-policy/2006Jul/0017.html</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>futureConsideration</keywords>
          <priority>P4</priority>
          <bug_severity>enhancement</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>5045</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Toufic Boubez">tboubez</reporter>
          <assigned_to name="Toufic Boubez">tboubez</assigned_to>
          <cc>asirveda</cc>
          
          <qa_contact name="Web Services Policy WG QA List">public-ws-policy-qa</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>11231</commentid>
    <comment_count>0</comment_count>
    <who name="Toufic Boubez">tboubez</who>
    <bug_when>2006-08-22 20:11:44 +0000</bug_when>
    <thetext>Description -
In Section 1.2 (Out of Scope) of the WG Charter, under the section &quot;Application Infrastructure&quot;, policy negotiation is explicitly mentioned as out of scope. It would be useful for the WG to discuss the ramifications of this exclusion, and possibly flag it as an item for follow-on work.
 
Justification -
Considering that the spec already defines an intersection mechanism for reconciling requester and endpoint policies, and considering that policy negotiation could be an important real world usage use case (think for example of the SSL handshake as an analogy), the topic cannot be ignored.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>11235</commentid>
    <comment_count>1</comment_count>
    <who name="Asir V Selvasingh">asirveda</who>
    <bug_when>2006-08-23 00:52:51 +0000</bug_when>
    <thetext>[Copying text from the mailing list discussion]
URI: http://lists.w3.org/Archives/Public/public-ws-policy/2006Aug/0019.html

Hi Toufic,

&gt; discuss the ramifications of this exclusion

If there are any ramifications to the framework and attachment documents, the best way to move forward is to raise them as concrete framework or attachment issues. This path is consistent with the WG charter - &apos;The Working Group will not engage in defining application or higher-level infrastructure related to Web Services Policy including storage, negotiation,&apos;

&gt; flag it as an item for follow-on work.

Agree - this is a good item for the V.Next charter. BTW - I noticed that Chris created a new component target in Bugzilla for V.Next charter: &apos;New Charter&apos;. 

Regards,

Asir S Vedamuthu
Microsoft Corporation</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>11675</commentid>
    <comment_count>2</comment_count>
    <who name="Toufic Boubez">tboubez</who>
    <bug_when>2006-09-13 23:09:35 +0000</bug_when>
    <thetext>I agree with Ashok and Toufic that this is an important case. 

At the same time, I think that adding the negotiation definition in any algorithmic form is premature at this point, and it may potentially impose unnecessary limitations on the future WS-Policy use cases.

One can argue that policy negotiation may involve some intermediary (as in the case of policy enforcement) or be done out-of-band. I also think that policy negotiation in the form of policy exchange will be unacceptable in many cases. 

I agree with Asir that the specification should adhere to the Charter, and that negotiation problems, use cases, etc - as discussed in the thread below - should be postponed and raised as framework issues.

Regards,

Yakov Sverdlov
CA 

-----Original Message-----
On Behalf Of Ashok Malhotra

I have no objection to postponing negotiation to v.Next but it would be nice
to get a definition on the table.

Here&apos;s a possible definition.

1. The two endpoints exchange policies.  If they agree on a policy alternative
the negotiation stops.

2. If they cannot agree on an alternative then:

EITHER: one of the endpoints introduces a new, or amended, policy and we go back to 1.

OR: Policy negotiation fails.

Toufic, if this something like what you had in mind?

All the best, Ashok</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>