J2EE™ Platform Web Services

7.1. Chapter Overview

• Many firewall configurations have filtered IP ports that block client applications from invoking applications and EJBs using RMI and RPC. Web Services applications, on one hand, address firewall filtering features by utilizing the default IP port 80 or port 8080 and decoupling the data transport from the physical transport layer. On the other hand, they also open up new areas of security integration requirements, including key management, digital signature generation, authentication between trading partners, and application host (Solaris or Windows) security hardening. Architects and developers may overlook some of these security areas because they usually focus on the SOAP message security alone.

• WS-Security is a new security ...