CodeGuru Home VC++ / MFC / C++ .NET / C# Visual Basic VB Forums Developer.com
Results 1 to 6 of 6
  1. #1
    Join Date
    Apr 2006
    Posts
    82

    Security issue for SOAP protocol

    Hi

    I am working on a software that uses SOAP protocol. (Using WSDL generated classes) One thing came to mind. If the server provide a method such as SetPassword(...), is there going to be a security concern? If you do not encrypt the parameter of this method, are eavesdroppers going to be able to see the password being set?

    Or, does it depend on the server's implementation?

    thanks

  2. #2
    Join Date
    Sep 2005
    Location
    London
    Posts
    208

    Re: Security issue for SOAP protocol

    Quote Originally Posted by xusword View Post
    is there going to be a security concern? If you do not encrypt the parameter of this method
    Yes, Use SSL.


    Regards
    Doron Moraz

  3. #3
    Join Date
    Apr 2006
    Posts
    82

    Re: Security issue for SOAP protocol

    thanks for your advice

    As you might have detected I am an absolute beginner at this. How do I know when I calling these SOAP method that SSL is involved? Or is asking the people who maintains the server the only way to find out if they use SSL?

  4. #4
    Join Date
    Sep 2005
    Location
    London
    Posts
    208

    Re: Security issue for SOAP protocol

    Quote Originally Posted by xusword View Post
    How do I know when I calling these SOAP method that SSL is involved?
    You won't get it if you didn't pay for it 8)

  5. #5
    Join Date
    Apr 2006
    Posts
    82

    Re: Security issue for SOAP protocol

    Hmm

    I wonder if I am using SSL already. What I know is when I try to connect to their server, it requires a "security token". However, I brief browsed through the server but never see the word "SSL" mentioned. Also, there is no mention in the WSDL about "SSL". I am really not sure. If SSL is involved, should it be on the WSDL?

    thanks

  6. #6
    Join Date
    Sep 2005
    Location
    London
    Posts
    208

    Re: Security issue for SOAP protocol

    Quote Originally Posted by xusword View Post
    Hmm

    I wonder if I am using SSL already.
    To determine whether SSL is configured correctly, try using an https URL such as the following:
    https://myserver.com


    Regards
    Doron Moraz

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  





Click Here to Expand Forum to Full Width

Featured