Re: NEW ISSUE: EPR comparison rule doesn't support Web services gateways/routers

Hi Rich,

On Wed, Jan 26, 2005 at 11:37:54PM -0500, Rich Salz wrote:
> > Paco, can you not just use a different URI instead of different
> > RefParams in order to distinguish between multiple services behind a
> > gateway?  If not, why?
> 
> Because people want to only expose a single endpoint, and then
> have their infrastructure dispatch or route based on things like message
> content.

That would be just fine by me, since layering is maintained.  What I
understood Paco to want is to be able to *identify* services behind a
gateway using RefParams in the request message.  That would break
layering.

> There several reasons for doing this; one of the most compelling
> is that they do not want to expose *anything* about their internal
> deployment details.  It avoids giving attackers any information.

Right.  Enforcing layering would avoid giving out that info, while
breaking layering would reveal it.

FWIW, URIs vs. RefPs doesn't change the layering, but the reason I asked
the question above was to find out if the "gateway" could be a proxy,
in which case there's no layering issue since a proxy works on behalf
of the sender.

Mark.
-- 
Mark Baker.   Ottawa, Ontario, CANADA.        http://www.markbaker.ca

Received on Thursday, 27 January 2005 05:41:01 UTC