Hi Shams, > surely rampart is message level security... end to end security... > transport level security is like TLS/SSL,,, point to point security...
Adding some points ... Rampart can be used with Transport level security ( where the messages are actually protected by the transport ) and Rampart validates whether the message arrived through a secure a transport. For example take Username token over HTTPS scenario. Here the message protection is transport level security and Rampart provides the authentication. Rampart also validates incoming transport to check whether it is "https". When Rampart signs and encrypts messages or parts of the messages as in your scenario, it is message level security. You will find this [1] comparison useful. thanks, /nandana [1] - http://xyzws.com/kbdatabase/TLevel_vs_MLevel_Security.html --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
