Showing posts with label message level security. Show all posts
Showing posts with label message level security. Show all posts

Sending Encrypted Binary Messages With PHP Web Services

Sunday, December 14, 2008

Web services has made the communication between heterogeneous environments (say PHP with .NET or Java) a reality. It has defines standards for communicate not only with texts but also with binaries. And more importantly you can keep these communication confidential using encrypted messages according to your requirement. In the post "Sending Encrypted Binary Messages With PHP Web Services" , we will look at how we can implement such a system with PHP in one side.

WS-SecurityPolicy With PHP

Wednesday, November 19, 2008

WS-SecurityPolicy specification defines standards for defining security policies for your web service. This post about "WS-SecurityPolicy With PHP" discusses the approaches you can take in order to associate security policies in to your PHP web service.

Signing SOAP Headers In PHP Web Services

Tuesday, November 18, 2008

Signing meta data of SOAP headers, can be as important as signing the SOAP body which contain the actual data in your business. This post "Signing SOAP Headers In PHP Web Services" talk about how your PHP web service providers and consumers can sign SOAP headers.

Detect Replay Attacks In to Your PHP Web Service

Monday, November 17, 2008

Intruders can make nasty damages to your web services just by using Replay Attacks. So you have to design your services carefully to detect and avoid them. This post "Detect Replay Attacks In to Your PHP Web Service" discusses the possible solutions on detecting replay attacks with PHP web services.

Encrypt and Sign your SOAP messages in PHP

Thursday, August 14, 2008

I wrote a blog about How to Encrypt and Sign your SOAP Messages in PHP. You can find out the two basic choices you have in securing soap messages + some links on how to develop them.