[XML-SIG] WSDL library ?

Rich Salz rsalz@zolera.com
Thu, 14 Feb 2002 11:01:20 -0500


The discussion seems to be heating up a bit, so I'm gonna start to slow 
down in terms of posting. :)  With this note I'll try to summarize some 
things that seem to have been mis-undrestood.

I never said IIOP is crappy; I said HTTP is crappy as a generic 
application protocol.

SOAP RPC Encoding can't transport arbitrary XML, agreed.  But SOAP 
itself can.  That's a good thing.  If I want to transmit legally binding 
information over the Internet, then SOAP's ability to include an XML 
DSIG (as either a header element, or using doc/literal style in the 
body) is way cool; XML-RPC can't do that.

The ability to transmit pointer-using data types (e.g, a balanced tree 
in C/C++), to make changes on the server, and to send the new tree back 
such that the client can reconstruct -- that can be important and 
useful. Sure, Corba proves that you can solve real-world problems 
without it, but that doesn't reduce its utility.  The SOAP id/href 
technique makes that possible.  Server or client-side state has nothing 
to do with it.

It has been more than three years since I left the COM, Corba, DCE 
middleware trenches, and I've gladly forgotten many details, but I don't 
believe it's possible to use Corba IIOP without using the Corba object 
model.  Most of the distributed computing world does not use the Corba 
object model.

As for pointers, etc., I'd like to see the IIOP serialization of a 
doubly-linked list.

I don't believe it is totally fair to complain about the developing 
world of SOAP interop.  The spec is fairly new, most suppliers are on 
their first generation of implementation, etc.  It is particularly not 
fair to compare it to Corba interop, which had was first defined nearly 
five years ago, after nearly five years of deliberately avoiding the 
issue. I am quite pleased by the state of SOAP interop; amazing progress 
has been made in a few months, so much so that at the end of the month 
there will be a two-day interop festival for early WSDL.

In an earlier message I refered to XSD files at 
http://www.zolera.com/schemas/2001/11/ ; unforunately our ISP (good ole 
Win-chapter 11-Star) had problems, which seem to be fixed.  They are 
real, not contrived examples, used in our Tamarin product; a server that 
does XML signatures and encryption.

Pace.
	/r$
-- 
Zolera Systems, http://www.zolera.com
Information Integrity, XML Security