HI Sander,
Thank you for your email.
I thought it was the case with multi-hop and thank you for confirming.
Cheers,
Jean-Paul Berthelot
Senior Analyst Programmer
Oban Pty Ltd
|
19-23 Prospect St
|
Box Hill Vic 3128
|
Australia
t
+61 3 9044 1704
|
m +61 432 327 799
|
f +61 3 9044 1799
e
jean-paul.berthelot@obansolutions.com.au
| w
www.obansolutions.com.au
***NOTICE***
This e-mail may contain confidential or legally privileged material and if you are not the intended recipient, you are advised that Oban Pty Ltd does not consent to you reading or copying the material and does not waive any confidentiality or legal privilege
associated with it. This e-mail may also contain material which is protected by copyright and if you are not the intended recipient, you are advised that Oban Pty Ltd has not consented to your reproduction of the material and there is no intention to provide
you with an implied licence to exercise any of the rights of the copyright owner or an authorised licensee. If you have received this e-mail in error, please advise Oban Pty Ltd immediately by return e-mail or by telephone on 61-3-92361900. The recipient
of this e-mail is solely responsible for conducting such tests and virus scanning as may be necessary, before using any attachment, to ensure that the attachment does not contain any virus and that use of the attached materials will in no way corrupt the recipient's
data or systems or those of any other person.
From: Sander Fieten [mailto:sander@fieten-it.com]
Sent: Friday, 18 October 2013 2:48 AM
To: Jean-Paul Berthelot
Cc: ebxml-dev@lists.ebxml.org; David Tuke; Quison Ngo
Subject: Re: [ebxml-dev] Multi hop conformance profile and Soap With Attachments
Hi Jean-Paul,
the multi-hop profile under AS4 refers to the multi-hop feature as described in part 2 of the ebMS V3 specification In the multi-hop
scenario specified by this feature the intermediaries are so-called transparent intermediaries which means they will not alter the message content.
The scenario you describe does alter message content and does not conform to the multi-hop feature from ebMS v3 Part 2 and hence not to multi-hop profile under AS4.
Regards,
Sander
----
Sander Fieten
Solutions architect
FIETEN IT
e: sander@fieten-it.com
t: +31 6 51507886
On 17 okt. 2013, at 17:02, Jean-Paul Berthelot <Jean.Paul.Berthelot@syncsoft.com.au> wrote:
Hi all,
I have a point of interest question regarding the multi-hop profile under AS4 with respect to Soap With Attachments.
My scenario is where a message service handler is operating in a multi-hop conformance mode and receives a Soap With Attachments message where the attachments have been compressed, signed and encrypted.
My question, is it an acceptable requirement for the message service handler operating under a multi-hop conformance profile to perform the following operations as the message is processed by the message service handler respectively:
1. Decrypt the attachment payloads
2. Perform signature verification
3. Decompress the payload
4. Verify, reformat the payload structure
5. Compress the amended payload
6. Sign the compressed payload
7. Encrypt the payload
That is should the Message Service Handler operating in a multi-hop conformance mode be permitted to perform security verification and manipulate the attachment payload content?
This means the content originally intended to be sent by a sending message service handler is not the same as the message processed by the receiving message service handler.
Any insight into this topic would be greatly appreciated.
Kind regards,
Jean-Paul Berthelot
Senior Analyst Programmer
Oban Pty Ltd | 19-23 Prospect St | Box Hill Vic 3128 | Australia
t +61 3 9044 1704 | m +61 432 327 799 | f +61 3 9044 1799
e jean-paul.berthelot@obansolutions.com.au | w www.obansolutions.com.au
<image001.png>
***NOTICE***
This e-mail may contain confidential or legally privileged material and if you are not the intended recipient, you are advised that Oban Pty Ltd does not consent to you reading or copying the material and does not waive any confidentiality or legal privilege associated with it. This e-mail may also contain material which is protected by copyright and if you are not the intended recipient, you are advised that Oban Pty Ltd has not consented to your reproduction of the material and there is no intention to provide you with an implied licence to exercise any of the rights of the copyright owner or an authorised licensee. If you have received this e-mail in error, please advise Oban Pty Ltd immediately by return e-mail or by telephone on 61-3-92361900. The recipient of this e-mail is solely responsible for conducting such tests and virus scanning as may be necessary, before using any attachment, to ensure that the attachment does not contain any virus and that use of the attached materials will in no way corrupt the recipient's data or systems or those of any other person.