Home > Ask the SOA Experts > Questions & Answers > Determining from WSDL if a Web service supports XML signature
Ask The SOA Expert: Questions & Answers
EMAIL THIS

Determining from WSDL if a Web service supports XML signature

Donald Flinn EXPERT RESPONSE FROM: Donald Flinn

Pose a Question
Other SOA Categories
Meet all SOA Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 04 November 2003
Can you please tell me whether there is some standard way of determining from the WSDL of a Web service if it supports XML signature and/or encryption? Can you also give me a URL at which a Web service provider is supporting XML signature and/or encryption is hosted?


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
SOA security
Trends 2008: Outsourcing, agile development
SOA prompts changes in quality assurance
Top 10 issues with mashups
Partnership aims at governance for SOA and Web 2.0
SOA, Web services create software security challenges
SecureCloud via SaaS
AmberPoint offers SOA visibility
Talking SOA appliances
Using JSON for Ajax security
The case against WS-Security

SOA security strategy
CA adds federated security to fight growing threats to SOA
Weak encryption creates SOA vulnerabilities
SOA runtime major step for Eclipse – Milinkovich
IBM, Microsoft, Google join OpenID
SOA needs RIA – Burton Group
Green computing takes center stage
Software AG boosts SOA security
SOA governance called vital to security
SOA, Web services create software security challenges
SOA policy beyond Java and .NET

WSDL (Web Services Description Language)
WSDL Tutorial
WSDLs get a report card
Amazon Mechanical Turk Web services app touts improved development GUI
SOA triple play: Policy meets Semantic Web
Eclipse Ganymede: Web Tools build SOA foundation
Java One: Mule architect looks to bring REST to SOA
WSDL technology
A middle way to SOA governance
WSDL 2.0, new messaging for Web services
WSO2 releases C and PHP frameworks

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
Web Services Description Language  (SearchSOA.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


At this time the WSDL specification does not address security. There has been discussion in some of the standards committees about addressing security in WSDL. If you and the readers of this Q&A session would send e-mail to this Web site or to myself relative to this subject, it will give me some ammunition to approach the standards committees to develop a solution to this problem.

Specifically, let me know how important is it to have a means of determining from WSDL whether a service supports XML signature and/or encryption? Further, how important is it to determine from the WSDL document what the crypto algorithms and other details of a digital signature and encryption are required and supported by the service provider or are required by the requestor of a Web service? Is this lack of functionality in WSDL causing problems in developing secure Web service products?

This is a chance for you to influence the evolution of Web services in a positive way, so lets hear from you.

Editor's Note: If you wish to weigh in on this issue, you can e-mail us at editor@searchwebservices.com and we will be happy to forward your comments on to Don.




Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



SOA Governance White Papers - BPM, EDA, IT Governance
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2001 - 2009, TechTarget | Read our Privacy Policy 		  TechTarget - The IT Media ROI Experts