Does SOAP define a security model?
No, the current version of SOAP relies on HTTP for security. The SOAP messages are exchanged as HTTP POST’s with an XML message in the payload of the HTTP request. SOAP can also run over HTTPS and the handler (Web service) for the SOAP message can provide basic authentication. Although not standardized, a SOAP message could contain headers with security attributes.
Related Questions
- Are SIO tags used to define inputs and outputs of the simulation model and are different definition files used to connect SIO tags to external data structure?
- I understand SOAP, XML and UDDI as foundation protocol for web services, but how about web services security and other advanced protocols?
- What is the simplest possible organic compound that I can define in the model?
