WS安全涉及的概念？
请任何人简要解释一下 WS 安全性中涉及的概念，以保护肥皂免受中间 Web 服务的影响......
Please can anyone explain briefly about concepts involved in WS security to protect soap from intermediate web services...
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
WS-Security 没有实现任何新功能。它说明了如何在 SOAP 世界中使用 XML 加密和 XML 签名规范。
WS-Security 与传输无关并提供消息级安全性。
由于它是消息级安全性 - 当我们使用加密时，消息将使用最终接收者已知的密钥进行加密，因此中间人无法查看该消息。
谢谢...
WS-Security does not implement anything new. It says how to use XML Encryption and XML Signature specifications in the SOAP world.
WS-Security is transport independent and provides message level security.
Since it's message level security - when we use encryption the message will be encrypted from a key known to the ultimate receiver, so intermediaries cannot view the message.
Thanks...
除非我们知道您感兴趣的内容（正如蒂姆在他的评论中提到的），否则很难提供简单的答案
。快速阅读本文以获得一个想法。
http://www.ibm.com/developerworks/webservices/ tutorials/ws-understand-web-services4/
这不是唯一的参考，但可以将其视为一个起点。
一旦您有了想法，您就可以提出具体问题，这里的人们将能够帮助您找到答案
HTH
曼鲁
It is difficult to provide a simplistic answer unless we know what you are interested in (as Tim mentioned in his comment)
Have a quick read at this to get an idea.
http://www.ibm.com/developerworks/webservices/tutorials/ws-understand-web-services4/
This is not the only reference but think of it as a place to start.
Once you have an idea you will able to ask specific questions and the folks here would be able to help you out with their answers
HTH
Manglu
JSR 109：实现企业 Web 服务
...也是一本有趣的读物。该文档有一些关于该主题的进一步参考。
JSR 109: Implementing Enterprise Web Services
... is also an interesting read. the doc has some further references on the topic.