Difference between Web Services 1.0 standard from 2004 and the 1.1 standard from 2006

[siva saran]

I have to create some webservices based applications with compatibility for both the 1.0 and 1.1 versions.
Though i did a analysis with the documents from the OASIS website i ws not able to infer much from them.
Any help in this matter is welcome

[Ulf Dittmer]

Which standard are you referring to? There is no one "web services standard"; rather there are a whole bunch of standards related to one another: SOAP, WSDL, WS-Security, UDDI, WS Basic Profile, BPEL, ...

[siva saran]

To be more precise ,I am referring to the WS-Security standards.

[Ulf Dittmer]

WS-Sec 1.1 is backwards compatible with 1.0, so supporting 1.1 should be sufficient. From the schema I see that there are new elements called "SignatureConfirmation" and "EncryptedHeader"; those must be for new functionality.

[siva saran]

I checked the schema for 1.1 at http://docs.oasis-open.org/wss/v1.1/oasis-wss-wssecurity-secext-1.1.xsd
and found that the namespace wsse has been changed to tns but i see a pretty small schema with the two elements mentioned EncryptedData and SignatureConfirmation.
Can i get a complete 1.1 version schema some where the 1.0 version elements have been incuded ie the 1.1 is built over the 1.0 schema

[Ulf Dittmer]

The 1.1 schema includes the 1.0 one, so everything that was in 1.0 also is in 1.1.

[siva saran]

Since 1.1 supports 1.0 also ,in case while verifying the incoming message wont there would be any namespace collisions.

If I am correct the namespace xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"

has been replaced by
xmlns:tns='http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd'

So do i have to check the namespaces everytime and then continue my verification process?