You are viewing a plain text version of this content. The canonical link for it is here.

Posted to soap-dev@ws.apache.org by Christian Geuer-Pollmann <ma...@nue.et-inf.uni-siegen.de> on 2002/01/02 16:50:54 UTC

RE: SOAP security

As always, the answer depends on your security requirements: What do you 
want to 'secure'?

Confidentiality while 'traveling' through the internet? Right, SSL is the 
correct choice.

Non-repudiation or authentication or integrity? SSL wont do that. Use XML 
Signature.

Real end-to-end-confidentiality: Use XML Encryption.

For a full-blown XML Signature implementation look @ 
http://xml.apache.org/security/

Christian

--On Mittwoch, 2. Januar 2002 08:03 -0700 armstpat@WellsFargo.COM wrote:

> Just use SSL and it is good.
>
> -----Original Message-----
> From: lp_cm@hotmail.com [mailto:lp_cm@hotmail.com]
>
> I wonder the security of the SOAP on the Internet.