Hi, if have SOA-ordered a pizza the other day but yesterday I learned I sold my house..... How do I prove in court that my digitally signed pizza order was ...
Assuming you are using SAML and WS-Security and have kept a log of the messages then its fine as this will contain both their authentication and your own. If...
Good answer Steve. I have a question for Jan. When you order the pizza over the phone how do you prove you didn't buy a house? Paul ... -- Paul Fremantle ...
... Well, assumed I have a witness for what I said, the uttering of "this is a pizza order, let me have a large magaritha" should sufficiently prove and state...
Yes -- and the same is true of a SOAP message. Typically, SOAP interchanges are stateless. (And they should be.) Therefore the order request will indicate...
Hi Anne, ... But the meaning of a SOAP message depends on the recipient's interface semantics and these are not controllable by the sender. IOW, when you...
... Ummm I'm currently reading an NDA, its certainly not "self-descriptive" as I don't have a legal degree. I also have a PO on my desk which has some numbers...
Steve, it appears, I did not make myself clear enough: My concern is with the message semantics. The depend on the recipients interface semantics and thus,...
... Now there is something around interaction semantics (as per my IEEE paper) that isn't covered by the current specs for either WS or REST, but that is...
I'd also like to point out that the message payload (the contents of the <soap:Body>) is, in fact, self describing, because it is an XML element with a...
The means by which the application framework enables the application to send an order to a service is beside the point. Many frameworks allow the application...
... Well, that is good for the interaction to succeed, but do you control the WSDL? There is a huge difference in court between "Here is the purchase order I...
... So, is this an order? receiver.cancel( ... And how would you ever be sure that cancel() had the same semantics by the time you invoke it as it had when you...
Hi Jan, all: ... The same way you're sure that POSTing "<cancel>" to http://RESTsvc.com/PO5432 has the same semantics as it had when you read the... um, I...
... You do not _delete_ an order, you _cancel_ it. There is a big difference between the two. Companies want to know what orders have been cancelled so they...
... This is an interesting point because we've had lots of discussion here about HTTP being an "application protocol". This overloading of "delete" to mean ...
... Another issue here: in a truely RESTful system, this would violate message self descriptiveness, because you need a form of standardized agreement and not...
... But it is perfectly open to implementation variation! There is absolutely nothing about HTTP or REST that guarantees that a correct implementation of the ...
... Correct. ... Correct. ... The lack of control you describe is exactly the reason why the messages MUST be self descriptive in order to protect the client...
... There are multiple ways to express that "self descriptive" ness. The more specific you are about it, the less ambiguity there is in a legal arena. Using...
... It's not just you. In my estimation, the uniform interface is the greatest advance in the history of large scale distributed computing ... well, in...
... Yes, that is a true correction of my point. Thanks, Mark. If I invoke receiver.placePizzaOrder( "Margaritha","15inch") and if placePizzaOrder is...
It would appear that there is an example of the Uniform Interface in the SOAP world as well. Web Services for Remote Portlets (WSRP). I recently blogged about...
... I disagree. RMI is uniform. It has a single operation, "invoke". I've stressed this before. Jan seemed to give up on the last go round. I find it very...
Gregg, ... Could you please put statements like this into context (as I do not agree with you on the Invoke issue). When/How did I give up? And what does that...