Policy Validator doesn't check the transport when Transport binding is used
with HttpsToken
--------------------------------------------------------------------------------------------
Key: RAMPART-108
URL: https://issues.apache.org/jira/browse/RAMPART-108
Project: Rampart
Issue Type: Bug
Reporter: Nandana Mihindukulasooriya
Assignee: Nandana Mihindukulasooriya
When a transport security binding is used wih HttpsToken, PolicyBasedValidator
doesn't check whether the incoming transport was HTTPS. This allows a service
to be accessed via HTTP ( violating the policy), if a HTTP endpoint is
available.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
