[
Lists Home |
Date Index |
Thread Index
]
- To: Rich Salz <rsalz@datapower.com>
- Subject: Re: [xml-dev] What Does SOAP/WS Do that A REST System Can't?
- From: Joe Gregorio <joe.gregorio@gmail.com>
- Date: Wed, 13 Apr 2005 16:22:08 -0400
- Cc: "xml-dev@lists.xml.org" <xml-dev@lists.xml.org>
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=UyiPFYQuXdkrNcg9I/S2iiBVR2eNaIVMFotRQOHmYPqtFrCpW0NZIB6bmBbiMVvVGIV2JnHEeNzW5DIiDHBiDMm075UlEyEMVkoQYT00esn3AX02L1IIoUGQ7KzbWYkkwhrSch73WiI7c/HvIs3aYl4HsilD14LlSSPVhK+lfuQ=
- In-reply-to: <424C23E2.7030106@datapower.com>
- References: <3f1451f5050330213723316d7a@mail.gmail.com> <Pine.LNX.4.44L0.0503310047280.19794-100000@smtp.datapower.com> <3f1451f5050331050977ac7d20@mail.gmail.com> <424C23E2.7030106@datapower.com>
- Reply-to: Joe Gregorio <joe.gregorio@gmail.com>
Rich,
I keep coming back to this message and starting
to type out replies then deleting them before
sending. The claims you are making are rather
strange. Maybe you could explain how WS-* solves
these problems, that of POE and Authentication, so I
have something to compare against.
On 3/31/05, Rich Salz <rsalz@datapower.com> wrote:
> Like Digest and BasicAuth, the two you mentioned require both parties to
> use that shared secret on every interaction. It's just like having to
> type your password into the shell after every command.
Thanks for the analysis of both these methods, but you missed the point.
I brought them up to demostrate that HTTP auth is extensible. If the current
schemes don't meet your requirements why aren't you working within
the HTTP framework to define an authentication mechanism that *does*
meet your needs.
Thanks,
-joe
--
Joe Gregorio http://bitworking.org
|
