Colm O hEigeartaigh created WSS-443:
---------------------------------------

             Summary: Treat tokens received over TLS as "encrypted"
                 Key: WSS-443
                 URL: https://issues.apache.org/jira/browse/WSS-443
             Project: WSS4J
          Issue Type: Bug
            Reporter: Colm O hEigeartaigh
             Fix For: 2.0



The streaming WS-Security code treats a UsernameToken received over TLS as a 
SignedSupportingToken. However, it doesn't treat it in the same way for 
encryption.

In other words, a UsernameToken received over TLS should satisfy a 
SignedEncryptedSupportingToken requirement.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to