I cannot understand the following: WS-Security and https are presented as alternatives.
The problem, although with https (as described), is that there are intermediaries, that is, proxies between the client and the server.
Then we can work with arround and guarrantee in terms of point, for example. between the proxy and the server, but not from end to end.
Thus, we can:
Client <- (secure) β Proxy <- (secure) β Server
But that is not equal
Client <--(secure)--> Server
So why is it not guaranteed from end to end? Can anyone give a concrete example?
Also, if I don't have a proxy on my network, does that mean https is ok?
Conversely, if I have a proxy, SHOULD I use WS-Security instead?
Thanks you
Cratylus Jan 03 '11 at 17:21 2011-01-03 17:21
source share