[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: Partyin' like it's 1999

• To: sean.mcgrath@p...
• Subject: Re: Partyin' like it's 1999
• From: Elliotte Harold <elharo@m...>
• Date: Wed, 27 Oct 2004 09:58:49 -0400
• Cc: xml-dev@l...
• In-reply-to: <417F9BAD.5060503@p...>
• References: <417F8F4A.3000407@p...> <417F9905.3080400@m...> <417F9BAD.5060503@p...>
• User-agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.3) Gecko/20040910

Sean McGrath wrote:


> The use case here is transmitting XML-based messages from one service to 
> another service on a Service Oriented Architecture and doing it in such 
> a way that (a) it is possible to be sure that a message routed "straight 
> through" has not been tampered with and yet (b) the XML is fully 
> visibile - not a lump of attatchment goo - for the purposes of 
> intelligent routing.

This sounds like exactly what XML digital signatures is supposed to do. 
If that doesn't work, then treat the document as read-only data, and 
wrap it in a MIME envelope (a.k.a XOP) along with a digital signature 
over the binary form of the data.


> Equally important is the fact that an intermediating service can 
> add/modify/delete content from the XML instance without doing damage to 
> the untouched parts of the instance.

I'm not sure I see how this is compatible with the need to route 
straight through without tampering. But again, this is a use case XML 
digital signatures attempts to address. Why is that not working for you?

-- 
Elliotte Rusty Harold  elharo@m...
XML in a Nutshell 3rd Edition Just Published!
http://www.cafeconleche.org/books/xian3/
http://www.amazon.com/exec/obidos/ISBN=0596007647/cafeaulaitA/ref=nosim

• Follow-Ups:
  • Re: Partyin' like it's 1999
    • From: Sean McGrath <sean.mcgrath@p...>

• References:
  • Re: Partyin' like it's 1999
    • From: Sean McGrath <sean.mcgrath@p...>
  • Re: Partyin' like it's 1999
    • From: Elliotte Harold <elharo@m...>
  • Re: Partyin' like it's 1999
    • From: Sean McGrath <sean.mcgrath@p...>

• Prev by Date: RE: Partyin' like it's 1999
• Next by Date: Re: Partyin' like it's 1999
• Previous by thread: Re: Partyin' like it's 1999
• Next by thread: Re: Partyin' like it's 1999
• Index(es):
  • Date
  • Thread