W3C home > Mailing lists > Public > www-ws@w3.org > January 2008

RE: WS-Security

From: Paul Cotton <Paul.Cotton@microsoft.com>
Date: Tue, 08 Jan 2008 12:10:06 +0000
To: Eric Frost <eric.frost@mp2kmag.com>, Antonio Faria Couto <i020501@dei.isep.ipp.pt>, "www-ws@w3.org" <www-ws@w3.org>
Message-ID: <4D66CCFC0B64BA4BBD79D55F6EBC22574A99DAC778@NA-EXMSG-C103.redmond.corp.microsoft.com>




Another alternative is to use "message level security" via a spec like WS-Security [1].

/paulc

[1] http://www.oasis-open.org/committees/download.php/16790/wss-v1.1-spec-os-SOAPMessageSecurity.pdf

Paul Cotton, Microsoft Canada
17 Eleanor Drive, Ottawa, Ontario K2E 6A3
Tel: (425) 705-9596 Fax: (425) 936-7329


-----Original Message-----
From: www-ws-request@w3.org [mailto:www-ws-request@w3.org] On Behalf Of Eric Frost
Sent: Monday, January 07, 2008 3:35 PM
To: Antonio Faria Couto; www-ws@w3.org
Subject: Re: WS-Security





Hi António,

It does not need to authenticate in the routers, the authentication is
encapsulated in
packet. The routers just transmit the packets. It is part of the magic of
TCP/IP.

Eric
http://www.mapelves.com
http://www.windychat.com

----- Original Message -----
From: "Antonio Faria Couto" <i020501@dei.isep.ipp.pt>
To: <www-ws@w3.org>
Sent: Monday, January 07, 2008 2:15 PM
Subject: WS-Security

Hi..

When the web service message passes through several routers how it works?!
The
message must autenticate in all the routers?! Or should be created a secure
line that connecting the service invoker with the servide proveider?!

Best regards,
António Couto
Received on Tuesday, 8 January 2008 12:10:43 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 12:10:43 GMT