philwilson.org

SOAP Security

02 December, 2006

At my last workplace, where I was employed between 2003 and 2005, we had a web services system which used SOAP across two different programming languages (Java and C++) and had a potential future in another two (.Net and Python). We had some, what you might call, practical considerations. If you like, you can check the dates on the OASIS spec

Oh, how we laughed. Even the idea of trying to do this in a semi-secure way without SSL was met with hollow laughter. I think it’s this which makes the current fuss so funny.

Whether things are different now I truly don’t know, and I’m glad that I don’t. I wouldn’t go back to that fool’s gold if you paid me.

See other posts tagged with general and other posts made in December 2006.