Attachments and WS-Security

From: Matthew Graham <mjg-at-cacr.caltech.edu>
Date: Thu, 18 Aug 2005 09:37:56 -0700


Hi,

I have been doing some background reading on advanced WS technologies and it turns out that SwA and DIME are incompatible with WS-Security
(and other WS-*): the problem is both SwA and DIME introduce data
structures that are external to the XML Infoset and so when you come to do something like digitally signing the SOAP message with WS-Security, there are no rules to specify how the attachment content relates to the SOAP envelope. Of course, the solution is to use MTOM which has support in Axis2 and WSE 3.0 at least, although these are both very new
(bleeding edge).

    Cheers,

    Matthew Received on 2005-08-18Z18:39:06