Re: Web Services Security

["Shannon ODonnell" <sodonnell@xxxxxxxxxxxxxxxxxxxxxxxxx>]

Thanks Adam, it does help to hear that.

-----Original Message-----
From: wdsci-l-bounces@xxxxxxxxxxxx [mailto:wdsci-l-bounces@xxxxxxxxxxxx] On
Behalf Of AGlauser@xxxxxxxxxxxx
Sent: Monday, August 20, 2007 11:37 AM
To: Websphere Development Studio Client for iSeries
Subject: Re: [WDSCI-L] Web Services Security

Shannon,

I took a quick glance at the standards document that is linked from the 
IBM webpage you mentioned.  Part of what the standard specifies is a way 
to attach a digital signature to the SOAP message, which is what I would 
have suggested as a good way to ensure the integrity of the message from 
point A to point B as you would like to do.  As a bonus, the digital 
signature also gives your the recipient confidence that the data was 
produced by A and not someone masquerading as A.  The confidence level of 
the recipient in both the integrity and the origin of the data depends of 
course on how much they trust your ability to keep your private key 
secret.

HTH,
Adam

Attention:

The information contained in this message and or attachments is 
intended only for the person or entity to which it is addressed and may
contain 
confidential and/or privileged material. Any review, retransmission, 
dissemination or other use of, or taking of any action in reliance upon,
this 
information by persons or entities other than the intended recipient is 
prohibited. If you received this message in error, please contact the sender
and 
delete the material from any system and destroy any copies. Thank you for
your 
time and consideration.

Attention: 

Le contenu de ce message et(ou) les fichiers ci-joints sadressent 
exclusivement ` la personne ou -entiti ` laquelle ils sont destinis. Ils
peuvent 
contenir de linformation confidentielle, protigie et(ou) classifiie. Il est

strictement interdit ` toute personne ou entiti autre que le(la)
destinataire 
privu(e) de ce message dexaminer, de riviser, de retransmettre ou de
diffuser 
cette information, de prendre une quelconque action en fonction ou sur la
base 
de celle-ci, ou den faire tout autre usage. Si vous avez regu ce message
par 
erreur, veuillez communiquer avec lexpiditeur(trice), supprimer ce message
et 
les fichiers ci-inclus de tout systhme, et en ditruire toutes copies,
quelles 
soient ilectroniques ou imprimies. Nous vous remercions de votre entihre 
collaboration.