Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[wtp-incubator-dev] XML Security Proposal

There is a new proposal ready for WTP review and consideration (following the process outlined by the Eclipse Development process). The XML-Security Plugin project.

http://wiki.eclipse.org/XML_Security_Tools_Proposal

Background information:

XML is available almost everywhere nowadays. As configuration files, for data exchange, in XML enabled databases, web services and many more. And a lot of these applications and services do not secure their XML documents: neither encryption nor digital signatures are applied. Or standard transport security like https is used. This destroys the advantages of XML and prevents parsing.

XML Security provides many advantages: the XML structure of the XML document remains intact, independent of the applied signature or encryption (or both). Arbitrary elements or element content can be secured, with different keys if desired. XML Security provides end-to-end-security, applying security directly to the message (information), not to the transport.

The XML Security Tools will show developers, how to secure XML documents and enable them to use these security features in their own environment. The intention of the tool is to spread the use of XML Security and to show users the power of the W3C recommendations.


The proposal is being made by Dominik Schadow, and he would be the project lead as well as a committer on the project. He is the sole maintainer of the code currently. I would also be willing to contribute time to the project, and the company I work for already adopts his current open source plugin in our eclipse based product.

This project would be another incubating project like the XSL Tools project. There is a bugzilla open for this proposal as well.

https://bugs.eclipse.org/bugs/show_bug.cgi?id=243106

Please provide feedback either here or in the bugzilla bug.

Dave




Back to the top