the security mechanism is https or any other security mechanism already
defined for http
if we think that https is not enough
Sal
[EMAIL PROTECTED] wrote:
From: Jonathan Rosenberg <[EMAIL PROTECTED]>
As a follow up from Dublin, I worked with a colleague of mine to put
together a brief document which describes REST a bit and presents some
examples of how it can be used for the kinds of configuration problems
we have in ACH. The draft is here:
http://www.ietf.org/internet-drafts/draft-griffin-bliss-rest-00.txt
What is the security mechanism?
The REST model seems to be oriented toward "read-only" access, where
the data is expected to flow from the server to the client, whereas
the ACH problem has data flowing from the client (UA) to the server
(proxy), which is what leads to most of the problems.
Dale
_______________________________________________
BLISS mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/bliss
_______________________________________________
BLISS mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/bliss
