Acknowledgments

Jothy Rosenberg and Dave Remy started writing this book two years ago while working together as co-founders of GeoTrust. The project took a lot of twists and turns along the way, as did the careers of both authors. But it is finally finished, and the timing is great for a book about WS-Security and all its cousin specifications. We are grateful to have completed it and are excited about having it out in the hands of people it can help.

We would like to acknowledge Shivaram Mysore from Sun, one of the authors and drivers of the XKMS standard, for writing a significant portion of Chapter 9 for us on trust, key management, and the XKMS standard. We believe XKMS is critical for Web Services Security because key management is at the heart of what security is all about. It is also likely to give PKI a new lease on life. We thank Eve Maler, also from Sun and an SAML specialist extraordinaire, for her comments, especially on Chapter 6, and for introducing us to Shivaram to write the XKMS section.

Simeon Simeonov was "Mr. Networking" for us and introduced us to Eve Maler and the people at Sams Publishing who are publishing this book. Sams Publishing also published his book Building Web Services with Java . Sim had numerous valuable discussions with us about the technical material. Sim is brilliant , nice, supportive, and an accomplished author himself. He currently works at the venture capital firm Polaris Venture Partners .

We would like to acknowledge David Chappell, who initially got us started on this project and let us run with it for a year on our own. David has written several books on Web services and is the editor of a series for Addison-Wesley on related subjects. His feedback, although very critical in the early days, ultimately was just the kick in the pants we needed to focus on the right information for the right audience.

Todd Green, our editor at Sams, was great to work with. Todd had the vision to see that this was the right book on the topic at the right time, and he moved on it quickly. He has the necessary combination of hard pushing to make deadlines and positive encouragement so that we stayed energized. He and his team focused us on the audience that most needs this book. Thanks also to Sean Dixon, Dan Knott, and the rest of the team at Sams Publishing who worked very hard and very fast to turn our ideas into the book you're holding.

A host of excellent reviewers helped review, discuss, and improve various sections of this book. We are grateful for their expert assistance. Reviewers included Shivaram Mysore, Anne Thomas Manes, Kunal Mittal, Anant Kadiyala, and Dave Spicer.

Jothy would like to thank his colleagues at Service Integrity who got excited about this book and encouraged him to "hurry up and get it out before it was too late." That includes Joe Maloney and Arthur Mateos. Jothy is honored to have a very strong technical team at Service Integrity that knows distributed computing, Web technologies, XML, and security inside and out. Jason DeBettencourt, Stanley Yamane, and Marco Lara have been together as an unstoppable development team for 10 years; they are like the three musketeers of management and monitoring tools for distributed computing. Jothy feels privileged to call them co-founders and friends . He has worked with them off and on since 1996. The person who got Jothy's career going in the right direction, who encouraged his first book on debuggers , who helped unite the team that now forms Service Integrity is Paul Gross. Paul is back together with the team and encouraging this book and our work at the company as a board member. Jothy also would like to recognize and thank JT Hardy and Jack Horton, formerly at GeoTrust and currently at AMS, who have a vision to change the world one big deal at a time. They are wonderfully supportive, fun to work with, and are great friends. The founding team at GeoTrust ”Dave Chen, Charles Jennings, Dave Remy, and Karla Friede ”were inspiring and exciting to work with. They had a vision that was a bit early but is now coming to fruition. Dave Remy and Jothy learned the practical and business side of security at GeoTrust and along the way built some very innovative technology. Later, Jothy and Dave were fortunate to work with and learn from very talented security experts including Mike Rowan and John Steenbruggen. Current investors in Service Integrity, David Orfao and David Barrett (known as The Davids) have a great vision for how to start and build companies and have been great supporters of Jothy and his co-founding team. Throughout it all, from before GeoTrust until today, Jothy's long-standing assistant who helps him in countless ways is Anne Cusack; she is indispensable to Jothy, and he deeply appreciates her.

Working with Anne Thomas Manes and Greg Shanton, who both agreed to write forewords for the book from different perspectives, was a pleasure . Anne knows the Web services industry inside out because she comes from a distributed computing background that includes DCE at Open Environment. She was also the editor of The Distributed Computing Monitor for Patricia Seybold Group. Later, she was Java Evangelist for Sun and the CTO of Systinet before going off and writing her own book called Web Services ”A Managers Guide . She now works as an analyst at The Burton Group. Greg Shanton, the CTO of AMS's Enterprise Security Group, is an expert in Internet security. He holds several critical patents. Greg is a big picture guy who has a vision about changing the Internet for the better and making a huge impact with the Web services projects he is leading at AMS. We are honored and humbled to have them both agree to contribute to this book.

Finally, Jothy would like to thank Dave Remy for starting this project. Dave is the most modest, hard-working, driven, and technically solid person he has ever worked with. They became fast friends in the early days of GeoTrust, and their friendship has grown from there. Dave is such a good friend that he comes to San Francisco every summer with his daughter to cheer Jothy on at the finish line of the Alcatraz Shark Fest open water swim across San Francisco Bay. When Dave came up with the idea for this book, they both knew it would be hard, but Jothy knew it would be done right because of Dave's deep knowledge and his attention to detail. They have a partnership and a friendship that he hopes will last a lifetime. (When do you want to write that next book, Dave?)

For his part, Dave would like to thank in particular Paul Reed, author of several books for Addison-Wesley, who has been a great friend and resource throughout Dave's career. Paul originally put us in touch with a publisher with the idea of writing a security book. He would also like to thank his compatriots at BEA, including David Bau, Eric Vasilik, David Read, Brendan Maclean, Anurag Pareek (who wrote the WS-Security in WebLogic Workshop chapter), Peter Dapkus (who sits in on the WS-Security meetings for BEA, gave great advice, and wrote the underlying BEA WS-Security implementation), and Giridhar Rao (who wrote the WebLogic Workshop WS-Security implementation). He would also like to thank other instrumental people in his life for their inspiration and influence, including David Chen, Dr. Emily Cooper, Eric Rudder, Doug Rowan, Adam Bosworth, Byron Sebastian, Charles Jennings (author of The Hundredth Window ), and of course, his parents. Finally, Dave wants to save the ultimate thanks for Jothy. He made this book happen; it would never have been finished but for Jothy's tremendous follow-through, indicative of the perseverance , determination, and never-give-up way of being that Jothy is famous for (which got him through 10 Alcatraz Shark Fest swims). For Dave, it is a privilege to be Jothy's friend ”a hero among us.

Finally, Jothy and Dave both deeply appreciate the strong support and encouragement from their wives Carole and Beth, respectively, and children Brendan, Zac, Joanna, Lisa, and Laura. Not only did they provide strong support, but they also suspended disbelief that we could not possibly do this when both of us were starting new jobs; Dave was also moving from one city to another and Jothy was funding and starting a new company.

Newton,  Massachusetts,  and  Seattle,  Washington
April  2004