Patent problems implementing WS-Security
Verisign has graciously initiated the process for donating TSIK to Apache. As part of the process, we started discussions on legal aspects and found that any one who implements WS-Security needs licenses from IBM and Microsoft. Note that this does not only affect TSIK incubation, but also the existing Apache WSS4J project.
The licenses in question from IBM and Microsoft are here:
http://www.microsoft.com/mscorp/ip/standards/
http://www.ibm.com/ibm/licensing/977Q/2112.shtml
Here's a summary of the issues involved in TSIK incubation: http://marc.theaimsgroup.com/?l=incubator-general&m=111894292828449&w=2
What's the worst case scenario? See what happened in Sender-ID case:
http://www.apache.org/foundation/docs/sender-id-position.html
If you are a current WSS4J user, plan for the worst and hope for the best.
The licenses in question from IBM and Microsoft are here:
http://www.microsoft.com/mscorp/ip/standards/
http://www.ibm.com/ibm/licensing/977Q/2112.shtml
Here's a summary of the issues involved in TSIK incubation: http://marc.theaimsgroup.com/?l=incubator-general&m=111894292828449&w=2
What's the worst case scenario? See what happened in Sender-ID case:
http://www.apache.org/foundation/docs/sender-id-position.html
If you are a current WSS4J user, plan for the worst and hope for the best.