[ebxml-dev] signed acknowledgement

[Patrick Yee <kcyee@csis.hku.hk>]

Dear all,

 

I have a question about messaging service. According to the specification, the sender of a message can request an acknowledgement from the receiver, and optionally, the sender can request that acknowledgement to be signed. Since the acknowledgement sending is done automatically by the MSH, does that imply the MSH should keep the application's private key and password to the keystore for signing automatically? Will that cause any vulnerability problem?

 

Thanks in advance.

 

Regards,

-Patrick

--
Patrick Yee
System Architect
Center for E-Commerce Infrastructure Development (CECID)
Dept. of Computer Science and Information Systems
The University of Hong Kong
Tel: (852) 22415674
Fax: (852) 25474611