RE: WS-Security

Paul Cotton <[email protected]> Tue, 08 Jan 2008 12:10:06 +0000

Newsgroups	gmane.comp.web.services.general
Organization	World Wide Web Consortium
Message-ID	<4D66CCFC0B64BA4BBD79D55F6EBC22574A99DAC778@NA-EXMSG-C103.redmond.corp.microsoft.com>




Another alternative is to use "message level security" via a spec like WS-Security [1].

/paulc

[1] http://www.oasis-open.org/committees/download.php/16790/wss-v1.1-spec-os-SOAPMessageSecurity.pdf

Paul Cotton, Microsoft Canada
17 Eleanor Drive, Ottawa, Ontario K2E 6A3
Tel: (425) 705-9596 Fax: (425) 936-7329


-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Eric Frost
Sent: Monday, January 07, 2008 3:35 PM
To: Antonio Faria Couto; [email protected]
Subject: Re: WS-Security





Hi António,

It does not need to authenticate in the routers, the authentication is
encapsulated in
packet. The routers just transmit the packets. It is part of the magic of
TCP/IP.

Eric
http://www.mapelves.com
http://www.windychat.com

----- Original Message -----
From: "Antonio Faria Couto" <[email protected]>
To: <[email protected]>
Sent: Monday, January 07, 2008 2:15 PM
Subject: WS-Security

Hi..

When the web service message passes through several routers how it works?!
The
message must autenticate in all the routers?! Or should be created a secure
line that connecting the service invoker with the servide proveider?!

Best regards,
António Couto