Data Avenue

Data Avenue Integration

Use-case description needed here

It would be good to allow delegation of existing user proxy (e.g., created by myproxy) to FTS.

Why?

What are the security risks of such proxy delegation? We may assume a restricted set of locations from where such delegation requests may come (host key cert?). We can also assume SSL connection between delegator, delegetee.

It would be good to have a JavaSript/web form that (1) creates a proxy, (2) this proxy can be sent to a servlet (other than FTS delegation service), (3) possibly, without CSR.

Why?

What are the security risks if the proxy is generated without CSR? Jsaga or myproxy generated proxies does not contain server generated public key CSR.

to be continued...