|
|
:: Web Services and SOA News ::
|
Structure and necessity of a web address
|
WS-Security provides the standards on how to apply security to messages, but it does not specify what security measures should be applied. WS-SecurityPolicy, which uses the WS-Policy language, allows for allows for the owner of a service to describe their security policy. Service owners can specify acceptable algorithms for encryption, formats for security tokens, and other information on how and when to apply security.
WS-Security can protect single SOAP messages, but it does not address how to protect a series of related SOAP messages. In a typical web service, it is common to exchange a series of messages with a consumer during the course of an interaction. WS-SecureConversation builds upon WS-Trust, WS-SecurityPolicy and WS-Security to provide a way of protecting a series of messages that fall under the same security context.
|
|
read more on The New Nation
|
|
[Wednesday, December 26, 2007]
|
|
|
|
|
