RE: Summing up on visibility(?)
"Champion, Mike" <[email protected]>
| Newsgroups | gmane.comp.web.services.ws-arch |
|---|---|
| Message-ID | <[email protected]> |
> -----Original Message----- > From: Mark Baker [mailto:[email protected]] > Sent: Thursday, January 09, 2003 3:12 PM > To: Champion, Mike > Cc: [email protected] > Subject: Re: Summing up on visibility(?) > > > You want to have that discussion again? 8-) XML is just syntax. > There's nothing in XML+namespaces that a firewall can use to make a > security decision. It needs application level knowledge (see the > message to Miles). Whatever. All I know is that every day I see another article in the trade press about this; today's is http://www.networkmagazine.com/article/NMG20021223S0005 I presume that admins can configure the firewall to reject all messages they don't recognize the application semantics of, and use various rules to control the processing of messages they do recognize. Roy's quote says nothing about using only HTTP headers to monitor, cache, etc. the information. If an intermediary understands XML and SOAP, in can be configured to use XPath or whatever to peek into messages and make such decisions. Thus, *XML* allows "visibility".