XML and Web Services In The News - 11 December 2006

Provided by OASIS | Edited by Robin Cover

This issue of XML Daily Newslink is sponsored by SAP AG



HEADLINES:

 SAML 2.0 Meets Web 2.0
 Java Update Warms to Scripting Languages
 CSS Mobile Profile 2.0 Working Draft
 BEA to Run Java Sans Operating System
 Passwords in the Clear
 Why China's UOF is Good


Sun Goes Multilingual with Java SE 6
China Martens, InfoWorld
Over two years in the making, Sun Microsystems is releasing the latest version of its Java Platform Standard Edition (Java SE) software Monday [2006-12-11], placing particular emphasis on the application development platform's support for other scripting languages. Java SE 6 is the first version that lets developers mix Java technology with other languages — languages such as PHP, Python, Ruby, and JavaScript. Sun's approach used to be that Java was the solution for all developers' problems, he said. But it has since become clear to Sun that developers want to use other languages in conjunction with Java to create hybrid applications. Sun has created a collection of scripting engines on its Web site, and Java SE 6 includes a preconfigured version of Mozilla's open-source Rhino JavaScript engine. Java SE 6 comes with support for Microsoft's Windows Vista operating system, the business release of which made its debut late last month. Sun had to engage in some "difficult workarounds" with pre-release versions of Vista, but [Mark] Reinhold said that such issues are no longer a problem when integrating Java SE 6 with the APIs contained in the final, shipping version of the Microsoft OS. Some of the joint engineering work Microsoft and Sun have done as part of interoperability effort Project Tango appears in Java SE 6's support for new Web services APIs such as the Java API for XML Web Services (JAX-WS) 2.0. When the full-blown open-source version of Java SE known as OpenJDK Project appears in March next year, it will include all the new functionality of Java SE 6.
See also: the announcement

Java Update Warms to Scripting Languages
Martin LaMonica, CNET News.com
Sun Microsystems has released a Java development kit that seeks to meld Java and scripting languages. Java SE 6 includes enhancements that let programmers write applications in Java as well as scripting languages, said Sun executives. The Java update complies with Java Specification Request 223, which lets scripting languages, including JavaScript and Python, run on the Java Virtual Machine. Scripting, or dynamic, languages are becoming an increasingly popular way to write Web applications, particularly the front-end user interface. The language PHP, for example, is used in millions of public sites, such as Web portals Lycos and Yahoo. With the latest version of the Java software, a company could have a group of developers write server Java programs, which do tasks such as complex calculations and database look-ups, while scripting developers create the user interface. In addition, the update will include software from a project called Project Tango, which is meant to improve the interoperability between Microsoft .Net Web services and Java programs.
See also: the Scripting Framework

CSS Mobile Profile 2.0 Working Draft
Robin Berjon (ed), W3C Technical Report
W3C's CSS Working Group has released a Working Draft of the "CSS Mobile Profile 2.0", updating a document from 2002-07-25. The specification defines in general a subset of CSS 2.1 that is to be considered a baseline for interoperability between implementations of CSS on constrained devices (e.g. mobile phones). Its intent is not to produce a profile of CSS incompatible with the complete specification, but rather to ensure that implementations that due to platform limitations cannot support the entire specification implement a common subset that is interoperable not only amongst constrained implementations but also with complete ones. Additionally, the specification aligns itself as much as possible with the OMA's Wireless CSS 1.1 specification. In order to conform to this specification, user agents, authoring tools, and content must conform to the 'Conformance and Error conditions' section of the CSS 2.1 specification, with the specified modifications.
See also: W3C CSS home page

BEA to Run Java Sans Operating System
Martin LaMonica, CNET News.com
BEA Systems has created a version of its Java application server designed for virtualization technology, using an approach that cuts the operating systems out of the picture. At the company's customer conference in Beijing this week, BEA will give details of a forthcoming product called WebLogic Server Virtual Edition and of related products, including an administration application. WebLogic Server is a Java application server used to run Java programs, such as high-volume Web sites. The virtual edition is a break from BEA's current offering in that it was written to run on VMware's hypervisor, which is the basis for VMware's virtualization software. Some virtualization software uses a hypervisor that lets a single computer run several instances of an individual software package. In BEA's case, it created software called Liquid VM. Liquid VM is an addition to the company's JRockit Java virtual machine, which runs directly on VMware's hypervisor. That virtual machine allows Java programs to interact with hardware servers without the need for an operating system, according to Stephen Hess, director of product management for the WebLogic Platform. The goal of the virtualization push at BEA is to give IT administrators a set of tools to consolidate several Java applications on a single server and to optimize their performance, he said. Typically, virtualization is used in corporate data centers to improve the utilization of existing servers by putting several workloads on a single machine.

Passwords in the Clear
Ed Rice (editor), W3C Draft TAG Finding
An updated editor's draft has been issued for "Passwords in the Clear," along with request for comments. The purpose of the finding is to clarify the security concerns around using passwords on the World Wide Web. Specifically, the objective is to point out that passwords should not be transmitted in the clear except for a few very specific cases. When a password are transmitted in clear text, it is vulnerable in many ways; (a) The password is available on the wire. As the password is transmitted over the wire, tools such as packet sniffers or network analyzers can easily monitor the traffic and intercept passwords as they're sent between computers. (b) The password is available in browsing history. Most web browsers allow you to navigate 'back' to previous pages, the content is cached for performance as well as ease of use for the user. These pages are stored in memory and are relatively easy to examine. (c) The password is readable on the web proxies. Many larger corporations, as well as internet service providers, offer web proxies to allow users faster downloads as well as some level of anonymity to web browsers. The Yankee Group estimates that between 1 and 2 percent of ecommerce transactions are related to fraud. As customers are becoming more 'net savvy' they are starting to examine the web page types and are attempting use only secure systems. Therefore its imperative that any organization who wishes to safeguard its customers data start with secure transfers of user login and password information.
See also: W3C TAG Findings

Why China's UOF is Good
Rick Jelliffe, O'Reilly Opinion
Some people are startled to find that, amidst all the talk here of OASIS (now ISO) ODF versus ECMA Office Open XML, China has developed its own independent office document format, Uniform Office Format (UOF). I am not startled, but delighted, and here's why. UOF is a Chinese (People's Republic) industrial standard. It seem mainly to come out of the needs of RedOffice, which is a fork of Open Office that adds support for some East Asian specific features: electronic chops (like signatures), hand annotation for tricky characters (I am surprised this is needed for Simplified Chinese documents: but Chinese need to communicate with Traditional Chinese users, not to mention Japane and Korea — any readers have more information on why this is needed, apart from for red-lining?), and so on. PRC has its own encoding of Unicode too, and I gather RedOffice and UOF may use this natively: it has nicer ordering and transcoding properties with some legacy Chinese encodings than UTF-16 or UTF-8. According to the UOF material, the format encapsulates requirements from several other word processing or office systems too. China raised the possibility of getting it adopted as an international standard, but there was not much interest from other national bodies: probably if it had Japanese and Korean features and acceptance as well it would have little trouble getting though ISO. Or even Taiwanese, Hong Kong and Singaporese adoption. However, not ever national standard needs to become an international standard. The cultural/organizational differences between nations is an additional hurdle even above indigenous technical and business requirements: it is difficult to have a thriving international participation in standards work until after you have a thriving national process.


XML.org is an OASIS Information Channel sponsored by BEA Systems, Inc., IBM Corporation, Innodata Isogen, SAP AG and Sun Microsystems, Inc.

Use http://www.oasis-open.org/mlmanage to unsubscribe or change an email address. See http://xml.org/xml/news_market.shtml for the list archives.


Bottom Gear Image