Re: Data Security of XML Web Services during transfers

From: Don Kiely (donkiely@computer.org)
Date: 01/15/03


From: Don Kiely <donkiely@computer.org>
Date: Tue, 14 Jan 2003 19:15:09 -0900


Check out the Web Services Enhancements for Microsoft .NET, currently
at http://msdn.microsoft.com/webservices/building/wse/default.aspx.
This toolkit implements a lot of the security initiatives that
Microsoft and others have been working on.

These are the tools to make it secure. Well, as secure as possible at
this point. But the whole goal is to make Web services secure enough
for online e-commerce transactions.

Don

On Tue, 14 Jan 2003 22:37:19 -0500, "Alex Ayzin"
<Alex.Ayzin@verizon.net> wrote:

>Hello,
>
>I've read all about security of XML Web Services; I got answers to all kind
>of questions. The only answer that I wans't able to find an answer to is an
>actual data security during transfers over HTTP. Data is serialiaed into XML
>stream and sent over HTTP to client. It's entripted. But what actually makes
>it secure? How does it work? I need to understand it all, because by now all
>I have is a Microsoft recommendations that Web Services are actually secure
>to use. Again, how secured is data during transfers over HTTP between users?
>Thanks,
>--Alex
>



Relevant Pages

  • Microsoft .NET
    ... reading up various documents that discuss - "What is Microsoft .Net" ... I'm trying to write a paper on security and software development using ... utilize connected solutions using Web services, ... language, of course, but also: ...
    (microsoft.public.dotnet.general)
  • Re: Security and the User experience
    ... just one secure token. ... Microsoft, Apple, *nix can say all they like, but the consumer will simply ... implement any security and/or just have no clue about security on their PC. ... The OS will then query the authority whenever ...
    (microsoft.public.security)
  • Re: MS Windows Security Update CD now available
    ... Hugh's line "Security should be integrated into the product to the extent that Security ... With the benefit of hindsight I think Microsoft should have adopted Hugh's line on security ... A computer system, secure or not, is worthless if it can't also perform tasks that are requested of it, using the technology available, and within the environment that is currently extant. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: Users slam Microsoft Security Analyser
    ... please explain to me what you would consider "secure ... And a Security Guard. ... Now let's begin our review of Microsoft. ... Most hackers are succesful because of lazy Sys Admins, ...
    (Focus-Microsoft)
  • FW: Microsoft Strategic Protection Program
    ... Subject: Microsoft Strategic Protection Program ... Internet security is a worldwide issue that affects ... not just Microsoft's customers, but also anyone connected to the Internet- ... communicate how to secure customers' Microsoft environments. ...
    (NT-Bugtraq)