developerWorks: Securing Web Services Using SSL and Tivoli Access Manager 4.1
Nov 10, 2003, 07:00 (0 Talkback[s])
(Other stories by David Loupia)
"Securing Web Services is one of the main challenges we have to
face today in order to allow the use of web services in a
"On one hand, the immediate security level you can provide on
web services is securing the transport protocol used to transmit
the SOAP requests and responses. If your Web Service is available
through HTTP, SSL can be a good way to fulfill your security
requirements. What SSL provides at the protocol level, is:
- "Identification: who are you?
- "Authentication: how do I know your identity is true?
- "Integrity: is the data you sent the same as the data I
- "Confidentiality: are we sure that nobody read the data you