Hi List,
We are experiencing some problems encrypting messages with optimized MTOM attachments. Say a client need to send an image(or binary content) in a confidential way. And the optimization is set to TRUE. In a normal scenario, where *no encryption* is available, the image content is sent as a MIME attachment. But when it comes to encryption, the serialization of the OM node (before the crypto process), doesn't handle this optimization. Thus the image(or binary content) get lost. So... my question is, if the sender needs to have MTOM optimization as well as message level encryption at the same time, can we provide that?
If yes, please let me know.
If not, we have two approaches.
1. Mention this in the user guide, and say that if the confidentiality is needed, set the optimization to FALSE. 2. If the user has set optimization to TRUE, we have to switch it to FALSE behind the curtain and encrypt the *non-optimized* content. Optionally we can optimize the CipherData contents as Rampart/Java does.

Thoughts pls...
Cheers,
Kaushalye




--
http://blog.kaushalye.org/
http://wso2.org/


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to