Home > Ask the SOA Experts > Questions & Answers > Impact of the W3C vs. OASIS battle on Web services security standards
Ask The SOA Expert: Questions & Answers
EMAIL THIS

Impact of the W3C vs. OASIS battle on Web services security standards

Donald Flinn EXPERT RESPONSE FROM: Donald Flinn

Pose a Question
Other SOA Categories
Meet all SOA Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 23 June 2003
How do you think the battle between W3C and OASIS will affect Web service security standards? Will it have an impact, or will the two eventually work together?

>
EXPERT RESPONSE
Standards committees, as any other technical business, have two aspects, the business aspect and the product aspect. The latter aspect, producing technical specifications, is the main raison d'etre for standards committees and thus is, arguably, the more important driving force. I'm going to address the technical aspect, as I don't feel qualified to address the business aspects.

A significant percentage of the prolific technical contributors are members of both organizations. Therefore, there is a significant amount of cross-fertilization between the organizations and an attempt to use each others existing specifications and not do the same work twice, especially if it's conflicting work. Further, OASIS has as a stated goal that it has a collaborative relationship with other standards bodies. This can be seen, for example in the WS-Security specification, which uses a number of specifications from the W3C.

Another important factor is the participation of user organizations, not just vendor organizations. Both W3C and OASIS are open entities, which means that is important for eventual users of the technologies to join, vote and make their desires known to the various technical committees. So a good part of the successful collaboration will depend on you, the user organizations, to foster cooperation and synergy. This is the time when user organizations need to step up to the plate.

The above does not mean that there is not competition or disagreement between the organizations on certain issues, there is. Also, there are times when vendor companies have an agenda that they would like to see in specifications. However, since the process is an open process, in the majority of situations a good technical argument will win out.

On balance, give the above, I believe that the W3C and OASIS as well as other standards organizations will compete but will carve out their particular niches and will continue to use each others work as building blocks. Yes, they will have territorial squabbles, but I believe both organizations realize, especially if they are prodded by the user organizations, that unless they produce meaningful and useful specifications they will not survive in a meaningful way. A second strong determinant for this position is the many technical members who are members of both organizations and who contribute the technical lifeblood to both organizations. Bottom line, I believe that both organizations will produce solid specifications and that, hopefully, the competition will be positive and synergistic and will not produce dueling specifications.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
SOA security
Trends 2008: Outsourcing, agile development
SOA prompts changes in quality assurance
Top 10 issues with mashups
Partnership aims at governance for SOA and Web 2.0
SOA, Web services create software security challenges
SecureCloud via SaaS
AmberPoint offers SOA visibility
Talking SOA appliances
Using JSON for Ajax security
The case against WS-Security

SOA security strategy
Weak encryption creates SOA vulnerabilities
SOA runtime major step for Eclipse – Milinkovich
IBM, Microsoft, Google join OpenID
SOA needs RIA – Burton Group
Green computing takes center stage
Software AG boosts SOA security
SOA governance called vital to security
SOA, Web services create software security challenges
SOA policy beyond Java and .NET
SecureCloud via SaaS

OASIS SOA and Web services standards
BPEL4People and WS-HumanTask get reference implementation
BPEL4People seen uniting SOA/BPM
Mindreef updates SOA testing tools
The Content Assembly Mechanism and SOA data service layers
OASIS okays ebXML messaging standard
The standards behind Web services
SOA simplicity by committee?
Apache releases Java SCA
Why does SOA need BPEL?
JCP offers portlet spec

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2001 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts