HTTPS without client authentication

[former_member183910]

Hi Friends,

In SOAP adapter, we have three options for HTTP

• HTTP without SSL

• HTTP with SSL (= HTTPS) without client authentication

• HTTP with SSL (= HTTPS) with client authentication

Please let me know if I use "HTTP with SSL (= HTTPS) without client authentication" , is it Transport Layer Sceurity of Message level Security?

Please answer only if you are confident. No guess please!!!

Thanks,

Sandeep Maurya

[Former Member · Accepted solution]

Hi Sandeep,

You use any of the options above, it is only transport layer security.

For Message Level security, you have to use Web Service Security and there options Sign andEncrypt .

Hope this helps.

Cheers....,

Raghu

[former_member183910]

sorry typing mistake,

my question is,

Please let me know if I use "HTTP with SSL (= HTTPS) without client authentication" , is it Transport Layer Sceurity or Message level Security?

[Former Member]

Hi,

 Please let me know if I use  "HTTP with SSL (= HTTPS) without client authentication" ,  is it Transport Layer Sceurity or Message level Security?

HTTPS is used to encrypt the traffic between the client and the Web server. SSL encrypt the segments of network connections at the Transport Layer end-to-end.

Don't get confused with the Client Authentication (with / without), as SSL is already being used in both the forms and the network is secured.

Regards,

Neetesh

[Former Member]

Its on Transport level.

Regards,

---Satish