Screaming Penguin - Source Does Matter

At present WS-Security is an "open standard" as Microsoft calls it but its not an open license, its proprietary and controlled by Microsoft and IBM. The Apache software foundation is making great efforts to include WS-Security with the "Axis" product line but has hit roadblocks with the licensing. Axis will not be interoperable with other products which use WS-Security (such as .net) until it is allowed to use the "open standard" in an "open source" license manner. IBM is apparently pushing FOR making WS-Security open source licensing compliant, Microsoft on the other hand is not as enthusiasic.

Microsoft said: "WS-Security is an open standard at the OASIS standards organization. Microsoft has made a royalty-free license commitment for WS-Security that is consistent with the OASIS IPR policy. In terms of Apache plans, it is best to ask them about any plans they may have."

Which might be interpreted as, its not our fault, and might be interpreted as a stalling move when they full and well understand the "plans".

I will give you a hint as to which way I interpret it, thanks again MicroJerky.   Apache faces Web services security spec roadblock