WS Security Performance

Mon, 17 Apr 2006 11:15:00 EDT

The WS Secure Conversation specification describes a mechanism letting multiple parties establish a context (using the WS Trust Request Security Token standard) and secure subsequent SOAP exchanges. Each WS Secure Conversation session has an associated shared secret. Instead of using this shared secret directly to sign and encrypt the conversation's messages, symmetric keys are derived from the secret itself. Deriving new keys for each message and different keys for signature and encryption limits the amount of data that an attacker can analyze in attempting to compromise the context.

Flexible Identity Federation XML Gateways to The Rescue

Fri, 16 Dec 2005 19:45:00 EST

Imagine a fresh business relationship between ACME Corporation and Partner. As a result of this relationship, ACME wants to grant Partner limited access to one of its core internal applications. They do this, naturally, by exposing a Web service.

Articles by Francois Lascelles

WS Security Performance

Flexible Identity Federation XML Gateways to The Rescue