[
Lists Home |
Date Index |
Thread Index
]
- From: "Dick Brooks (E)" <dick@8760.com>
- To: "David Galbraith" <david@moreover.com>, <xml-dev@xml.org>
- Date: Sun, 7 May 2000 08:54:22 -0500
David,
If I sent a PGP encrypted/signed document as a call parameter using SOAP how
would the receiver know the information was signed/encrypted. Is there a way
to indicate the data is signed/encrypted using SOAP constructs? If not,
does this mean I have to package SOAP in another envelope, MIME perhaps?
Dick Brooks
http://www.8760.com/
-----Original Message-----
From: owner-xml-dev@xml.org [mailto:owner-xml-dev@xml.org]On Behalf Of
David Galbraith
Sent: Saturday, May 06, 2000 1:24 PM
To: xml-dev@xml.org
Subject: RE: SOAP, plague, love
Privacy, authentication, integrity and non-repudiation are envelope issues,
all of these can be dealt with separately within an HTTP framework. In fact
part of the simplicity and attraction of XML-RPC and SOAP whatever the
pitfalls is that the message is separate from the envelope.
DG
Dick Brooks said:
>Actually Dave, CGI implementers can apply as much or as little security
into
>a CGI script as needed. For example, every business transaction sent via
the
>Gas Industry Standard Board (GISB) Electronic Delviery Mechanism (EDM) is
>encrypted and digitally signed prior to transmission. I don't believe
>XML-RPC nor SOAP include privacy, authentication, integrity or
>non-repudiation capabilities. IMO, the GISB EDM standard is far more secure
>and a better B2B solution than XML-RPC and SOAP.
. . . . . . . . . . . . . . . . .
David Galbraith - Chief Architect
Moreover.com - the webfeed company
david@moreover.com
415-577-8828 (US)
0777-565-8880 (UK)
favorite webfeed:
http://www.moreover.com/xml
***************************************************************************
This is xml-dev, the mailing list for XML developers.
To unsubscribe, mailto:majordomo@xml.org&BODY=unsubscribe%20xml-dev
List archives are available at http://xml.org/archives/xml-dev/
***************************************************************************
***************************************************************************
This is xml-dev, the mailing list for XML developers.
To unsubscribe, mailto:majordomo@xml.org&BODY=unsubscribe%20xml-dev
List archives are available at http://xml.org/archives/xml-dev/
***************************************************************************
|
