About Question enthuware.ocejws.v6.2.267 :

All the posts and topics that contain only an error report will be moved here after the error is corrected. This is to ensure that when users view a question in ETS Viewer, the "Discuss" button will not indicate the presence of a discussion that adds no value to the question.

Moderators: Site Manager, fjwalraven

Post Reply
t.alex
Posts: 19
Joined: Tue Feb 11, 2014 8:35 am
Contact:

About Question enthuware.ocejws.v6.2.267 :

Post by t.alex »

Hi Frits,

are you sure about the correctness of this option?

Code: Select all

The message is decrypted and encrypted on intermediate nodes, having insecure points in the network
a quick check on the internet reveals that this is actualy not the case

http://www.xyzws.com/scdjws/WSGEN/4
Does not work with Intermediaries
Ivan writes on his notes at page 233:
There are some drawbacks with SSL security:
• Does not allow intermediaries access to SOAP messages.
All of the communication between the server is encrypted, which makes it impossible for
intermediaries to process any messages.


Greetings,
Alex

fjwalraven
Posts: 429
Joined: Tue Jul 24, 2012 2:43 am
Contact:

Re: About Question enthuware.ocejws.v6.2.267 :

Post by fjwalraven »

Hi Alex,

I understand the confusion. Transport security doesn't work out of the box for intermediate nodes. In order to make transport security work you have to create two ssl endpoins. An intermediate soap node has to interpret the soap message (otherwise it is not an intermediate node in terms of soap processing) so the node has to have a SSL endpoint and setup a new SSL connection with the next node(or ultimate destination). This makes the intermediate nodes unsafe.

Does this explanation take away hour doubts?

Regards,
Frits

t.alex
Posts: 19
Joined: Tue Feb 11, 2014 8:35 am
Contact:

Re: About Question enthuware.ocejws.v6.2.267 :

Post by t.alex »

ok, thanks. it does make sense the way you put it.

blacksnow666
Posts: 13
Joined: Thu Apr 24, 2014 9:23 pm
Contact:

Re: About Question enthuware.ocejws.v6.2.267 :

Post by blacksnow666 »

Code: Select all

SSL does not work with all Transport Layer protocols.
not sure what what you mean?
HTTP + SSL = HTTPS
LDAP + SSL = LDAPS
SMTP + SSL = SMTPS

if you say ssl does not work will all transport layer protocol, can you list down the protocol that ssl cannot work with?

fjwalraven
Posts: 429
Joined: Tue Jul 24, 2012 2:43 am
Contact:

Re: About Question enthuware.ocejws.v6.2.267 :

Post by fjwalraven »

Yes, you are right this answer doesn't make sense. I will correct the option.

Thanks for your feedback!

Regards,
Frits

blacksnow666
Posts: 13
Joined: Thu Apr 24, 2014 9:23 pm
Contact:

Re: About Question enthuware.ocejws.v6.2.267 :

Post by blacksnow666 »

as of today, the latest version is 1/14.
it is still giving the same options.

fjwalraven
Posts: 429
Joined: Tue Jul 24, 2012 2:43 am
Contact:

Re: About Question enthuware.ocejws.v6.2.267 :

Post by fjwalraven »

Updates don't come immediately.

When there are a number of important changes they will be bundled and pushed to the server.

Regards,
Frits

MichaelZett
Posts: 22
Joined: Wed Dec 10, 2014 8:28 am
Contact:

Re: About Question enthuware.ocejws.v6.2.267 :

Post by MichaelZett »

In my version of the course the answer: "It reduces the performance as each message has to be signed and encrypted, and decrypted on the receiving node." is stated as correct answer but the explanation says "it's the other way round" (the answer beeing a disadvantage of Message Level Security instead).

fjwalraven
Posts: 429
Joined: Tue Jul 24, 2012 2:43 am
Contact:

Re: About Question enthuware.ocejws.v6.2.267 :

Post by fjwalraven »

Yes, that is not correct. Rephrased the whole question.

Thanks for your feedback!

Regards,
Frits

Post Reply

Who is online

Users browsing this forum: No registered users and 61 guests