Chapter 4. Safeguarding the Identity and Integrity of XML Messages

Introduction To and Motivation for XML Signature

Chapter 2, “The Foundations of Web Services,” and Chapter 3, “The Foundations of Distributed Message-Level Security,” provided an overview of Web services (including XML) and security concepts. This chapter and the next bring two of the key security principles—confidentiality and integrity—into the world of XML. Confidentiality, in the world of XML, manifests itself as XML Encryption. Integrity manifests itself as XML Signature. XML Signature and XML Encryption are fundamental strategies for securing XML and are pillars of WS-Security. Because XML is one of the foundations of Web services, it follows that these two technologies are ...

Get Securing Web Services with WS-Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.