RE: WS-Security

Another alternative is to use "message level security" via a spec like WS-Security [1].

/paulc

[1] http://www.oasis-open.org/committees/download.php/16790/wss-v1.1-spec-os-SOAPMessageSecurity.pdf

Paul Cotton, Microsoft Canada
17 Eleanor Drive, Ottawa, Ontario K2E 6A3
Tel: (425) 705-9596 Fax: (425) 936-7329


-----Original Message-----
From: www-ws-request@w3.org [mailto:www-ws-request@w3.org] On Behalf Of Eric Frost
Sent: Monday, January 07, 2008 3:35 PM
To: Antonio Faria Couto; www-ws@w3.org
Subject: Re: WS-Security





Hi António,

It does not need to authenticate in the routers, the authentication is
encapsulated in
packet. The routers just transmit the packets. It is part of the magic of
TCP/IP.

Eric
http://www.mapelves.com
http://www.windychat.com

----- Original Message -----
From: "Antonio Faria Couto" <i020501@dei.isep.ipp.pt>
To: <www-ws@w3.org>
Sent: Monday, January 07, 2008 2:15 PM
Subject: WS-Security

Hi..

When the web service message passes through several routers how it works?!
The
message must autenticate in all the routers?! Or should be created a secure
line that connecting the service invoker with the servide proveider?!

Best regards,
António Couto

Received on Tuesday, 8 January 2008 12:10:43 UTC