Extra headaches of securing XML

Audit: The standards already provide for complete encription of a part of or the entire XML. In fact the tools do this for you. I can only speak to IBM's tool set but the industry has kicked Microsoft's arse on this one. I suspect all tool builders have such security except for the .NOT tool sets. It is not by accident that Microsoft failed to update it's Visual Tools (blaming SQLServer - but truth is the monopoly isn't keeping up with the rest of the industry. Ballmer has been to preocupied with antitrust to get to the business of security.

Anyway, the web service itself can include an autit trail plus your standard key authentication. So HTTP can be just fine. It is favored only because HTTP will get by fire walls.

But messaging systems like MQSeries can also be part of the mix. Candle and IBM are pusing MQ hard because of the assured delivery and async features but also because of so so obvious security and billing packages that can be added to that technology. All those black shirters with a program to be marketed will be able to turn them into web services that can be discovered, used and billed for. It really is the next big thing.; Posted by: mighetto Posted on: 03/29/04 You are currently: a Guest | Members login | Terms of Use

Reply to Story Reply to Message

Subscribe to this discussion via Email or RSS

Alternatives to XML jorwell | 03/29/04

Not an XML issue rpmyers1 | 03/29/04

Typical Industry Tactics jorwell | 03/29/04

Silk mighetto | 03/29/04

oops, didn't finish bthomasmo@... | 03/29/04

Audit mighetto | 03/29/04

oh, here we go again V Sanders | 03/29/04

Nice? jorwell | 03/29/04

Just offshore it Hamburger Cook | 03/29/04

XML Overhyped DB_z | 03/30/04

and it ain't easy either V Sanders | 03/31/04

What do you think?

Here to help you with your Document Management Needs
Doc is an enigma. Born to a Russian ballerina and a German electrical engineer, he grew up in various locations in the United States. He’s seen the insides of more brands, versions, and generations of printer and printer-related hardware than almost anyone.
To learn more about this mysterious figure check out his blog on ZDNet and his Workspace on TechRepublic. You’ll be glad you did.
Produced by
ZDNet and