OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help



   RE: SOAP, plague, love

[ Lists Home | Date Index | Thread Index ]
  • From: "David Galbraith" <david@moreover.com>
  • To: <xml-dev@xml.org>
  • Date: Sat, 6 May 2000 11:24:05 -0700

Privacy, authentication, integrity and non-repudiation are envelope issues,
all of these can be dealt with separately within an HTTP framework. In fact
part of the simplicity and attraction of XML-RPC and SOAP whatever the
pitfalls is that the message is separate from the envelope.


Dick Brooks said:

>Actually Dave, CGI implementers can apply as much or as little security
>a CGI script as needed. For example, every business transaction sent via
>Gas Industry Standard Board (GISB) Electronic Delviery Mechanism (EDM) is
>encrypted and digitally signed prior to transmission. I don't believe
>XML-RPC nor SOAP include privacy, authentication, integrity or
>non-repudiation capabilities. IMO, the GISB EDM standard is far more secure
>and a better B2B solution than XML-RPC and SOAP.

. . . . . . . . . . . . . . . . .
David Galbraith - Chief Architect
Moreover.com - the webfeed company
415-577-8828 (US)
0777-565-8880 (UK)
favorite webfeed:

This is xml-dev, the mailing list for XML developers.
To unsubscribe, mailto:majordomo@xml.org&BODY=unsubscribe%20xml-dev
List archives are available at http://xml.org/archives/xml-dev/


News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 2001 XML.org. This site is hosted by OASIS