[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message] Re: ANN: Building Web Services the REST Way
>>>Imagine requesting medical >>>records; because of my "only endpoints" requirement -- imposed by >>>us HIPPA regulations -- SSL will not suffice.) >> >>Could you describe how SSL fails to satisfy? > > Perhaps the HTTPS server isn't the endpoint in the sense relevant to the > security constraint ... but it will see the cleartext URI. Yes. In addition, SSL works by having two parties share a common key. That makes digital signature and non-repudiable disclosure impossible: each party could claim the other signed or exposed the data. Public-key crypto does not have those attributes. /r$
|
PURCHASE STYLUS STUDIO ONLINE TODAY!Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced! Download The World's Best XML IDE!Accelerate XML development with our award-winning XML IDE - Download a free trial today! Subscribe in XML format
|