wss-dev message

Subject: Re: [wss-dev] SOAP Message Security 1.1 Implementation

From: Richard Salz <rsalz@us.ibm.com>
To: "Jason Smith" <jasonsmth987@gmail.com>
Date: Mon, 29 Dec 2008 08:19:18 -0500

>   "This specification does not mandate that faults be returned as 
> this could be used as part of a denial of 
> service or cryptographic attack. We combine signature and encryption
> failures to mitigate certain types of attacks."

Ah well, wouldn't be the first time I disagreed with a standard :)

        /r$

--
Visiting Member, IBM Academy
STSM, DataPower Chief Programmer
WebSphere DataPower SOA Appliances
http://www.ibm.com/software/integration/datapower/

References:
- Re: [wss-dev] SOAP Message Security 1.1 Implementation
  - From: "Jason Smith" <jasonsmth987@gmail.com>