users@jax-rpc.java.net

Header processing and Security

From: Kevin Jones <kevinj_at_DEVELOP.COM>
Date: Tue, 07 Oct 2003 16:41:37 +0100

After the long discussion about mustUnderstand and handler chains I've
had another though, what happens in the face of WS-Security. In this
case the header block could be encrypted so that the RI knows nothing
about the headers *until* one of the handlers decrypts the block, so it
is imperative in that case that the handlers remove the MU=1 headers to
prove they have processed them.

Comments?

Kevin Jones
Developmentor
www.develop.com