Attachments and WS-Security

Matthew Graham mjg at cacr.caltech.edu
Thu Aug 18 09:37:56 PDT 2005


Hi,

I  have been doing some background reading on advanced WS technologies 
and it turns out that SwA and DIME are incompatible with WS-Security 
(and other WS-*): the problem is both SwA and DIME introduce data 
structures that are external to the XML Infoset and so when you come to 
do something like digitally signing the SOAP message with WS-Security, 
there are no rules to specify how the attachment content relates to the 
SOAP envelope. Of course, the solution is to use MTOM which has support 
in Axis2 and WSE 3.0 at least, although these are both very new 
(bleeding edge).

    Cheers,

    Matthew



More information about the grid mailing list