-
June 19th, 2009, 11:32 PM
#1
Security issue for SOAP protocol
Hi
I am working on a software that uses SOAP protocol. (Using WSDL generated classes) One thing came to mind. If the server provide a method such as SetPassword(...), is there going to be a security concern? If you do not encrypt the parameter of this method, are eavesdroppers going to be able to see the password being set?
Or, does it depend on the server's implementation?
thanks
-
June 20th, 2009, 04:52 AM
#2
Re: Security issue for SOAP protocol
Originally Posted by xusword
is there going to be a security concern? If you do not encrypt the parameter of this method
Yes, Use SSL.
Regards
Doron Moraz
-
June 20th, 2009, 08:21 PM
#3
Re: Security issue for SOAP protocol
thanks for your advice
As you might have detected I am an absolute beginner at this. How do I know when I calling these SOAP method that SSL is involved? Or is asking the people who maintains the server the only way to find out if they use SSL?
-
June 21st, 2009, 05:49 AM
#4
Re: Security issue for SOAP protocol
Originally Posted by xusword
How do I know when I calling these SOAP method that SSL is involved?
You won't get it if you didn't pay for it 8)
-
June 21st, 2009, 05:05 PM
#5
Re: Security issue for SOAP protocol
Hmm
I wonder if I am using SSL already. What I know is when I try to connect to their server, it requires a "security token". However, I brief browsed through the server but never see the word "SSL" mentioned. Also, there is no mention in the WSDL about "SSL". I am really not sure. If SSL is involved, should it be on the WSDL?
thanks
-
June 21st, 2009, 05:37 PM
#6
Re: Security issue for SOAP protocol
Originally Posted by xusword
Hmm
I wonder if I am using SSL already.
To determine whether SSL is configured correctly, try using an https URL such as the following:
https://myserver.com
Regards
Doron Moraz
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|