Hi all,
I have a point of interest question regarding the multi-hop profile under AS4 with respect to Soap With Attachments.
My scenario is where a message service handler is operating in a multi-hop conformance mode and receives a Soap With Attachments message where the attachments have been compressed, signed and encrypted.
My question, is it an acceptable requirement for the message service handler operating under a multi-hop conformance profile to perform the following operations as the message is processed by the message service handler respectively:
1.
Decrypt the attachment payloads
2.
Perform signature verification
3.
Decompress the payload
4.
Verify, reformat the payload structure
5.
Compress the amended payload
6.
Sign the compressed payload
7.
Encrypt the payload
That is should the Message Service Handler operating in a multi-hop conformance mode be permitted to perform security verification and manipulate the attachment payload content?
This means the content originally intended to be sent by a sending message service handler is not the same as the message processed by the receiving message service handler.
Any insight into this topic would be greatly appreciated.
Kind regards,
Jean-Paul Berthelot
Senior Analyst Programmer
Oban Pty Ltd
|
19-23 Prospect St
|
Box Hill Vic 3128
|
Australia
t
+61 3 9044 1704
|
m +61 432 327 799
|
f +61 3 9044 1799
e
jean-paul.berthelot@obansolutions.com.au
| w
www.obansolutions.com.au
***NOTICE***
This e-mail may contain confidential or legally privileged material and if you are not the intended recipient, you are advised that Oban Pty Ltd does not consent to you reading or copying the material and does not waive any confidentiality or legal privilege
associated with it. This e-mail may also contain material which is protected by copyright and if you are not the intended recipient, you are advised that Oban Pty Ltd has not consented to your reproduction of the material and there is no intention to provide
you with an implied licence to exercise any of the rights of the copyright owner or an authorised licensee. If you have received this e-mail in error, please advise Oban Pty Ltd immediately by return e-mail or by telephone on 61-3-92361900. The recipient
of this e-mail is solely responsible for conducting such tests and virus scanning as may be necessary, before using any attachment, to ensure that the attachment does not contain any virus and that use of the attached materials will in no way corrupt the recipient's
data or systems or those of any other person.