Page 1 of 1

About Question enthuware.ocejws.v6.2.267 :

Posted: Thu Feb 27, 2014 3:51 am
by t.alex
Hi Frits,

are you sure about the correctness of this option?

Code: Select all

The message is decrypted and encrypted on intermediate nodes, having insecure points in the network
a quick check on the internet reveals that this is actualy not the case

http://www.xyzws.com/scdjws/WSGEN/4
Does not work with Intermediaries
Ivan writes on his notes at page 233:
There are some drawbacks with SSL security:
• Does not allow intermediaries access to SOAP messages.
All of the communication between the server is encrypted, which makes it impossible for
intermediaries to process any messages.


Greetings,
Alex

Re: About Question enthuware.ocejws.v6.2.267 :

Posted: Fri Feb 28, 2014 12:40 am
by fjwalraven
Hi Alex,

I understand the confusion. Transport security doesn't work out of the box for intermediate nodes. In order to make transport security work you have to create two ssl endpoins. An intermediate soap node has to interpret the soap message (otherwise it is not an intermediate node in terms of soap processing) so the node has to have a SSL endpoint and setup a new SSL connection with the next node(or ultimate destination). This makes the intermediate nodes unsafe.

Does this explanation take away hour doubts?

Regards,
Frits

Re: About Question enthuware.ocejws.v6.2.267 :

Posted: Fri Feb 28, 2014 3:48 am
by t.alex
ok, thanks. it does make sense the way you put it.

Re: About Question enthuware.ocejws.v6.2.267 :

Posted: Thu Nov 20, 2014 3:16 am
by blacksnow666

Code: Select all

SSL does not work with all Transport Layer protocols.
not sure what what you mean?
HTTP + SSL = HTTPS
LDAP + SSL = LDAPS
SMTP + SSL = SMTPS

if you say ssl does not work will all transport layer protocol, can you list down the protocol that ssl cannot work with?

Re: About Question enthuware.ocejws.v6.2.267 :

Posted: Thu Nov 20, 2014 4:32 pm
by fjwalraven
Yes, you are right this answer doesn't make sense. I will correct the option.

Thanks for your feedback!

Regards,
Frits

Re: About Question enthuware.ocejws.v6.2.267 :

Posted: Mon Dec 01, 2014 2:26 am
by blacksnow666
as of today, the latest version is 1/14.
it is still giving the same options.

Re: About Question enthuware.ocejws.v6.2.267 :

Posted: Mon Dec 01, 2014 2:31 am
by fjwalraven
Updates don't come immediately.

When there are a number of important changes they will be bundled and pushed to the server.

Regards,
Frits

Re: About Question enthuware.ocejws.v6.2.267 :

Posted: Wed Dec 10, 2014 8:31 am
by MichaelZett
In my version of the course the answer: "It reduces the performance as each message has to be signed and encrypted, and decrypted on the receiving node." is stated as correct answer but the explanation says "it's the other way round" (the answer beeing a disadvantage of Message Level Security instead).

Re: About Question enthuware.ocejws.v6.2.267 :

Posted: Wed Dec 10, 2014 11:45 pm
by fjwalraven
Yes, that is not correct. Rephrased the whole question.

Thanks for your feedback!

Regards,
Frits