Comments
Richard Davies wrote: The UK has a good crop of technology pioneers in cloud computing - for example ElasticHosts, FlexiScale, Flexiant, OnApp - and also some strong government initiatives such as G-Cloud. We will have to see whether this kind of technical leadership converts into swift mass-market adoption or not.
Cloud Computing
Conference & Expo
November 2-4, 2009 NYC
Register Today and SAVE !..

2008 West
DIAMOND SPONSOR:
Data Direct
SOA, WOA and Cloud Computing: The New Frontier for Data Services
PLATINUM SPONSORS:
Red Hat
The Opening of Virtualization
GOLD SPONSORS:
Appsense
User Environment Management – The Third Layer of the Desktop
Cordys
Cloud Computing for Business Agility
EMC
CMIS: A Multi-Vendor Proposal for a Service-Based Content Management Interoperability Standard
Freedom OSS
Practical SOA” Max Yankelevich
Intel
Architecting an Enterprise Service Router (ESR) – A Cost-Effective Way to Scale SOA Across the Enterprise
Sensedia
Return on Assests: Bringing Visibility to your SOA Strategy
Symantec
Managing Hybrid Endpoint Environments
VMWare
Game-Changing Technology for Enterprise Clouds and Applications
Click For 2008 West
Event Webcasts

2008 West
PLATINUM SPONSORS:
Appcelerator
Get ‘Rich’ Quick: Rapid Prototyping for RIA with ZERO Server Code
Keynote Systems
Designing for and Managing Performance in the New Frontier of Rich Internet Applications
GOLD SPONSORS:
ICEsoft
How Can AJAX Improve Homeland Security?
Isomorphic
Beyond Widgets: What a RIA Platform Should Offer
Oracle
REAs: Rich Enterprise Applications
Click For 2008 Event Webcasts
In many cases, the end of the year gives you time to step back and take stock of the last 12 months. This is when many of us take a hard look at what worked and what did not, complete performance reviews, and formulate plans for the coming year. For me, it is all of those things plus a time when I u...
SYS-CON.TV
Mixed Nuts
Mixed Nuts

One of the most frustrating things I've ever encountered in my life is trying to loosen a nut using a socket from the wrong measurement system. You know, I've got a metric nut, but an English socket set. So I find a socket that's close, but it's loose, and inevitably I end up stripping the nut, bruising my knuckles, and generally using language I don't care to repeat. To paraphrase an old saw - the only thing worse than no standard is two standards.

Web services often feels equally bruising, to my brain, if not to my knuckles (although I tend to bruise them hitting something in frustration too). Whoever said, "The wonderful thing about standards is there are so many of them" was certainly familiar with Web services.

In this issue we focus on standards and interoperability. Although I rant and rave, things are better now than they were initially. Most SOAP implementations will now work with one another, and the WS-I has released the first version of the Basic Profile, which will assist everyone. I remember one of our earliest proposals concerned workarounds to make different Web services implementations actually work together. We've come a long way.

But that doesn't mean we're out of the woods by any means. As usual, there is a problem. Or rather, there are multiple problems. Most of them involve standards. The first problem is that there are too many standards bodies. Between the W3C and OASIS, it's a cinch you can make your marketing point by proposing some standard and seeing which place it sticks. Then the poor WS-I gets to figure out how to make it work with all the other various overlapping standards. It doesn't help that some of these bodies will actually accept multiple standards for the same thing - it's bad enough the two bodies have a competition going, but to have one body running multiple standards for the same idea is really dumb.

Fortunately for the most part the basics are now working. But the battle around the next set of standards - security, business process, and management - is still sizzling. It looks like the business process specification is solidifying under BPEL4WS, but the various orchestration and choreography specifications and their subspecifications are still up in the air. Security is stuck with the split personality of SAML and WS-Security, and management is a mess.

What we need at this point is a grass-roots movement to limit the number of standards and focus adoption on a single standard - effectively short-circuiting the whole argument. This would allow us, the consumers, to effectively accelerate the development of Web services by starving out unworthy standards. Much like a consortium uses its buying power to arrange better pricing.

So, I hereby propose the establishment of the WSSSC - the Web Services Standards Selection Committee. The WSSSC will not propose new standards - we'll leave that to OASIS and W3C. Nor will we try to make them work together; we'll leave that to the WS-I. Our sole purpose will be to sort standards into meaningful categories, and to pick the one that we think best suits the needs of the industry. Once we make a selection, we'll be bound to use only that standard.

Of course, we'll need offices, computers, and such. Send your contributions, starting at $10,000 addressed to me, care of the magazine office. Once we reach $1 million, I will get everything rolling...

But seriously, we do need to pressure the industry to stop the insanity. Too many bodies, too many standards. Options are good, to a point, but the automobile only really got started when Henry Ford said "You can have any color you like, as long as it's black." Time for a little black paint in the Web services soul. Oh, and any contributions I do receive will be used for a new socket set with both English and metric.

About Sean Rhody
Sean Rhody is the founding-editor (1999) and editor-in-chief of SOA World Magazine. He is a respected industry expert on SOA and Web Services and a consultant with a leading consulting services company. Most recently, Sean served as the tech chair of SOA World Conference & Expo 2007 East.

In order to post a comment you need to be registered and logged in.

Register | Sign-in

Reader Feedback: Page 1 of 1

The article states that "Security is stuck with the split personality of SAML and WS-Security" - this is not so. SAML is a standard for exchanging security information, while WS-Security defines a standard representation of security information within a SOAP header. WS-Security does not compete with SAML; rather, it incorporates the use of SAML assertions as one of the multiple security tokens it supports.

And it's amazing how quickly these standards are created. I "wonder" if many of these standards happen to specify the exact mechanism some vendor has already done or will most easily work with the products they already offer...

SOAP started off quite simple, but it's gotten extremely ugly quickly. The WS-I has only helped in that they've said most of the "nifty" features tacked onto SOAP aren't to be used because they create the interoperability problems.

We'll continue to suffer with these problems as long as we allow people to create standards before they're proven in the field. The RFC process is much better in that people can PROPOSE all sorts of standards, but before they become a standard, there need to be implementations that prove it's really worthwhile.

Unfortunately, we're following the OSI model into oblivion.


Your Feedback
Joseph M. Chiusano wrote: The article states that "Security is stuck with the split personality of SAML and WS-Security" - this is not so. SAML is a standard for exchanging security information, while WS-Security defines a standard representation of security information within a SOAP header. WS-Security does not compete with SAML; rather, it incorporates the use of SAML assertions as one of the multiple security tokens it supports.
David wrote: And it's amazing how quickly these standards are created. I "wonder" if many of these standards happen to specify the exact mechanism some vendor has already done or will most easily work with the products they already offer... SOAP started off quite simple, but it's gotten extremely ugly quickly. The WS-I has only helped in that they've said most of the "nifty" features tacked onto SOAP aren't to be used because they create the interoperability problems. We'll continue to suffer with these problems as long as we allow people to create standards before they're proven in the field. The RFC process is much better in that people can PROPOSE all sorts of standards, but before they become a standard, there need to be implementations that prove it's really worthwhile. Unfortunately, we're following the OSI model into oblivion.
SOA World Latest Stories
In Aug 2011, around 72 million people accessed social networking sites from mobile, increase of 37% from previous year (study by ComScore) and nearly 50% (of 72 million) access networking sites almost every day. Devising a cohesive strategy for addressing both mobility and social medi...
In a surprise move on Tuesday, January 10, Oracle wheeled out its Big Data Appliance. That’s the one it said in October would be ready sometime in the first half. Only nobody believed it meant early in the first half. Heck, it’s not even clear anybody thought Oracle could make the fi...
A Munich court Thursday found Motorola Mobility guilty of infringing an Apple patent and handed Apple a permanent injunction against two Android smartphones. Apple can enforce the injunction after posting a bond lest MMI succeed in invalidating the slide-to-unlock patent (EP1964022) ...
Quick Response (QR) codes are intended to help direct users quickly and easily to information about products and services, but they are also starting to be used for social engineering exploits. This article looks at the emergence of QR scan scams and the rising concern for users today....
The Chinese company that claims it owns the iPad trademark says it plans to seek a ban on iPad exports out of China, threatening global supplies. According to what a lawyer for Proview Technology (Shenzhen) Co Ltd told Reuters, the firm is petitioning Chinese customs to stop shipment...
Cisco Wednesday filed suit in the European Union’s second-highest court, the General Court in Luxembourg, challenging the European Commission’s rubber stamp last October of Microsoft’s $8.5 billion acquisition of Skype. Cisco says it isn’t opposed to the merger, but figures the EC sh...
Subscribe to the World's Most Powerful Newsletters
Subscribe to Our Rss Feeds & Get Your SYS-CON News Live!
Click to Add our RSS Feeds to the Service of Your Choice:
Google Reader or Homepage Add to My Yahoo! Subscribe with Bloglines Subscribe in NewsGator Online
myFeedster Add to My AOL Subscribe in Rojo Add 'Hugg' to Newsburst from CNET News.com Kinja Digest View Additional SYS-CON Feeds
Publish Your Article! Please send it to editorial(at)sys-con.com!

Advertise on this site! Contact advertising(at)sys-con.com! 201 802-3021


SYS-CON Featured Whitepapers
ADS BY GOOGLE