Re: [dss] Use-cases and requirements - observations

[Rich Salz <rsalz@datapower.com>]

> leave the driving to us.

For example, make an SSL connection to the server.  If the DN in the
hostname matches the server you're talking to, just trust everything it
says.

I believe that's the most feasible server-authentication model.  No
surprise, it's the standard SSL authentication model.
	/r$


--
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html