SOAP security and external underwear- April 10, 2002 I'm sure Paul Kulchenko will soon fix the SOAP::Lite vulnerability that was just noticed. This episode got me to wondering, though, about the original rationale for the SOAPaction HTTP header, and what can or should be done to make filtering SOAP traffic workable. Several years ago, one of the original SOAP FAQs, from DevelopMentor, said: ...http://weblog.infoworld.com/udell/categories/security/2002/04/09.html#a184 myNetWatchman: neighborhood watch for the Internet- April 8, 2002 Thinking about trust and social capital, in online communities, reminds me of the work of Lawrence Baldwin, the creator of myNetWatchman.com. As I mentioned in a column on broadband security, Lawrence takes issue with the attitude of personal firewalls toward the steady stream of malicious probes that they repel. That attitude can be summed up as: "Don't worry, this is just the background noise of the Internet, and we're shielding you from it." ...http://weblog.infoworld.com/udell/categories/security/2002/04/08.html#a182 |