Is SOAP secure?
When you register, you'll begin receiving targeted emails from my team of award-winning writers. Our goal is to keep you informed on recent service-oriented architecture (SOA) and SOA-related topics such as integration, governance, Web services, Cloud and more.
Hannah Smalltree, Editorial Director
SOAP is simply an XML message format that can be used to pass data between
systems. It's not within the scope of SOAP to implement security. That being
said, it's quite easy to secure SOAP messages. You can encrypt the SOAP
messages to ensure data integrity and data privacy. You can sign the
messages with a digitial signature for authentication and proof of origin.
You can require that one or both of the participants in a SOAP message
exchange authenticate themselves. You can intercept a SOAP message before
it's passed to an application to check for proper authorization. This
documentation provides an overview of how you might implement security using
SOAP:
http://www.systinet.com/products/wasp_advanced/doc/security_overview.html
Dig Deeper
-
People who read this also read...
This was first published in March 2002