OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]
RE: [ebxml-dev] Multi hop conformance profile and Soap WithAttachments

HI Sander,

 

Thank you for your email.

 

I thought it was the case with multi-hop and thank you for confirming.

 

Cheers,

 

Jean-Paul Berthelot

Senior Analyst Programmer

Oban Pty Ltd | 19-23 Prospect St | Box Hill Vic 3128 | Australia

t +61 3 9044 1704 | m +61 432 327 799 | f +61 3 9044 1799

e jean-paul.berthelot@obansolutions.com.au | w www.obansolutions.com.au


Description: Description: C:\Users\b1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Outlook\NMJW9AGN\Logo - Oban - small.png


***NOTICE***
This e-mail may contain confidential or legally privileged material and if you are not the intended recipient, you are advised that Oban Pty Ltd does not consent to you reading or copying the material and does not waive any confidentiality or legal privilege associated with it. This e-mail may also contain material which is protected by copyright and if you are not the intended recipient, you are advised that Oban Pty Ltd has not consented to your reproduction of the material and there is no intention to provide you with an implied licence to exercise any of the rights of the copyright owner or an authorised licensee. If you have received this e-mail in error, please advise Oban Pty Ltd immediately by return e-mail or by telephone on 61-3-92361900.  The recipient of this e-mail is solely responsible for conducting such tests and virus scanning as may be necessary, before using any attachment, to ensure that the attachment does not contain any virus and that use of the attached materials will in no way corrupt the recipient's data or systems or those of any other person.

 

From: Sander Fieten [mailto:sander@fieten-it.com]
Sent: Friday, 18 October 2013 2:48 AM
To: Jean-Paul Berthelot
Cc: ebxml-dev@lists.ebxml.org; David Tuke; Quison Ngo
Subject: Re: [ebxml-dev] Multi hop conformance profile and Soap With Attachments

 

Hi Jean-Paul,

 

the multi-hop profile under AS4 refers to the multi-hop feature as described in part 2 of the ebMS V3 specification  In the multi-hop scenario specified by this feature the intermediaries are so-called transparent intermediaries which means they will not alter the message content. 

 

The scenario you describe does alter message content and does not conform to the multi-hop feature from ebMS v3 Part 2 and hence not to multi-hop profile under AS4. 

 

Regards,

Sander

 

----
Sander Fieten
Solutions architect

FIETEN IT
e: sander@fieten-it.com
t:  +31 6 51507886

 

On 17 okt. 2013, at 17:02, Jean-Paul Berthelot <Jean.Paul.Berthelot@syncsoft.com.au> wrote:



Hi all,

 

I have a point of interest question regarding the multi-hop profile under AS4 with respect to Soap With Attachments.

 

My scenario is where a message service handler is operating in a multi-hop conformance mode and receives a Soap With Attachments message where the attachments have been compressed, signed and encrypted.

My question, is it an acceptable requirement for the message service handler operating under a multi-hop conformance profile to perform the following operations as the message is processed by the message service handler respectively:

1.      Decrypt the attachment payloads

2.      Perform signature verification

3.      Decompress the payload

4.      Verify, reformat the payload structure

5.      Compress the amended payload

6.      Sign the compressed payload

7.      Encrypt the payload

That is should the Message Service Handler operating in a multi-hop conformance mode be permitted to perform security verification and manipulate the attachment payload content?

 

This means the content originally intended to be sent by a sending message service handler is not the same as the message processed by the receiving message service handler.

                                                                                                                                                                                

Any insight into this topic would be greatly appreciated.

 

Kind regards,

 

 

Jean-Paul Berthelot

Senior Analyst Programmer

Oban Pty Ltd | 19-23 Prospect St | Box Hill Vic 3128 | Australia

t +61 3 9044 1704 | m +61 432 327 799 | f +61 3 9044 1799

e jean-paul.berthelot@obansolutions.com.au | w www.obansolutions.com.au


<image001.png>


***NOTICE***
This e-mail may contain confidential or legally privileged material and if you are not the intended recipient, you are advised that Oban Pty Ltd does not consent to you reading or copying the material and does not waive any confidentiality or legal privilege associated with it. This e-mail may also contain material which is protected by copyright and if you are not the intended recipient, you are advised that Oban Pty Ltd has not consented to your reproduction of the material and there is no intention to provide you with an implied licence to exercise any of the rights of the copyright owner or an authorised licensee. If you have received this e-mail in error, please advise Oban Pty Ltd immediately by return e-mail or by telephone on 61-3-92361900.  The recipient of this e-mail is solely responsible for conducting such tests and virus scanning as may be necessary, before using any attachment, to ensure that the attachment does not contain any virus and that use of the attached materials will in no way corrupt the recipient's data or systems or those of any other person.

 

 



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]