开发者

ws-security and transport security

I can not understand the following: WS-Security and https are presented as alternatives.

The problem though with https (as described) is when there intermediaries i.e. proxies are between client and server.

Then we can work arround and guarrantee point-to-point security e.g. between proxy and server but not end to end.

So we can have:

Client <--(secure)--> Proxy <--(secure)-->Server

But this is not equal to

Client <--(secure)--> Server  
开发者_运维问答

So why is not the end-to-end guaranteed? Could someone please give a specific example?

Also if in my network I do not have any proxies does this mean that https is ok?

And vice versa if I have proxies I MUST use WS-Security instead?

Thank you


Your understanding is not exactly correct. With HTTPS your communication is secure between client and server. Proxy doesn't know anything about the communication except one thing - the host you are communicating to. This is achieved by using HTTPS proxy (HTTP Connect command, see RFC 2616 for details). So there's no problem with HTTPS (I don't know where you've found the opposite).

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜