[mashup-dev] [jira] Commented: (MASHUP-650) Use WS-Security instead of https for mashup sharing

[Tyrell Perera (JIRA)]

    [ https://wso2.org/jira/browse/MASHUP-650?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16107#action_16107 ] 

Tyrell Perera commented on MASHUP-650:
--------------------------------------

It seems like even if we used WS-Security, we will still require a valid certificate in order to sign the message.

> Use WS-Security instead of https for mashup sharing
> ---------------------------------------------------
>
>                 Key: MASHUP-650
>                 URL: https://wso2.org/jira/browse/MASHUP-650
>             Project: WSO2 Mashup Server
>          Issue Type: New Feature
>            Reporter: Jonathan Marsh
>            Assignee: Tyrell Perera
>             Fix For: 1.1
>
>
> Currently to share the dest machine needs a valid cert to enable https communication.  Since we own both ends of the communication, can't we use WS-Security over http to protect the un/pw being sent along with the mashup zip?

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira