Interested to Buy Any Domain ? << Click Here >> for more details...
Answer Posted / supra
SOAP-DSIG is used to satisfy the message authentication
requirement. It is important to note that you can use SOAP-
DSIG and SSL simultaneously by exchanging
the above HTTP messages over SSL.
Technology Satisfied security requirements
SSL Confidentiality, sender/recipient authentication, and
message authentication by MAC
SOAP-DSIG Message authentication by digital signature and
MAC
SSL provides confidentiality and sender/recipient
authentication. SSL also has functionality for adding MACs
to transmitted messages. On the other hand,
SOAP-DSIG can be used to add not only MACs but also digital
signatures to transmitted messages, but it is not
sufficient for sender/recipient authentication
because it is vulnerable to attacks such as replay attacks.
Therefore, SOAP-DSIG and SSL complement the functionalities
that the other system lacks.
Remember that in order to satisfy the requirement
of non-repudiation, at a minimum you need to simultaneously
guarantee both message authentication by using a
digital signature and sender authentication.
Therefore, using SOAP-DSIG and SSL (with client
authentication) simultaneously is the first step towards
realizing non- repudiation. Specifically, you use
SOAP-DSIG for message authentication by using a digital
signature and SSL client/server authentication for
sender/recipient authentication.
| Is This Answer Correct ? | 1 Yes | 0 No |
Post New Answer View All Answers
What soap means?
Explain the utilities of soap web services to its users?
Can soap use json?
What are the important characteristics of soap envelope element?
What is the difference between top down & bottom up approach in soap web services?
how to find the person who locked in the weblogic server
State some disadvantages due to the usage of SOAP?
what is the transport method in SOAP?
What are some important characteristics of a soap envelope element?
Elaborate the term SOAP?
How REST is lightweight compare to SOAP?
what is the major obstacle faced by the users using SOAP?
What is the procedure to send the call and get the response from the client to server using soap?
To test a web service you must create a windows application or web application to consume this service. State whether true or false.
How does soap work?
