WS-SecurityPolicy enters modern times

Sweeping the recent headlines feed of MSDN can be rewarding: for example, today I just discovered that WS-SecurityPolicy was just updated to accomodate the needs of the new WS-Security, WS-Trust and WS-SecureConversation as we know them today.

In fact, with its 90 pages the new version is rather a mojor rewrite. It gives unprecedented expressive power, factoring the assertions in suitable categories and treating “modern” token types as first class citizens, yet it doesn’t leave the space underspecified. I believe that this specification gives the measure of the maturity reached by the WS-*; it deserves to be read by a less sleepy version of myself, so I’ll postpone the drilldowns…