[
Lists Home |
Date Index |
Thread Index
]
> Just to be clear, REST has no objection to running over SSL. REST
> defines a use pattern for application layer protocols. It is
> transport layer agnostic.
I know. I was merely pointing out that REST lets the lower layers
do things that it won't. Such as maintaining state on both sides
of the connection which is (all together now) a requirement for good
security.
/r$
--
Rich Salz Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
|
