XML.com: XML From the Inside Out

XML.comWebServices.XML.comO'Reilly Networkoreilly.com
  Articles | Weblogs | Newsletter | Safari Bookshelf
advertisement

Article:
 Very Dynamic Web Interfaces
Subject: XMLHTTP is Good but Needs WS-Security
Date: 2005-02-18 13:40:55
From: ErikJ

We use XMLHTTPRequest to send/receive SOAP in a couple of products we ship. Two other useful things we leverage: The Windows version knows how to handle NT Challenge/Response, so you can call sites running under Windows Integrated Security transparently. It also supports HTTP 1.1 compression, so you can GZIP your payload on the server (SOAP usually compresses well).


But what we really need is the ability to sign/encrpyt messages using WS-Security standards. In Microsoft's case, version 5 of the MSXML parser kit (which contains XMLHTTPRequest) has a few features, but you only get that version with Office 2003. Version 6 is coming, but I've heard Microsoft may have to pull out the signing/encrypting functions at least for now.


I haven't reviewed Mozilla/Safari support for WS-Security yet, but having that functionality in genreal would be quite helpful.



Previous Message Previous Message   Next Message Next Message

Sponsored By:


Contact Us | Our Mission | Privacy Policy | Advertise With Us | | Submissions Guidelines
Copyright © 2008 O'Reilly Media, Inc. | (707) 827-7000 / (800) 998-9938