Profile

Ok... so in this sense, it's not much different than the alternative pull authorization explicitly detailed in section 3.3 of the AS4 spec that uses the client authentication of a pull request over HTTPs. In the same way, the transport layer is providing the authentication and the MSH layer "trusts" ...

I'm guessing, Makesh, that implementation occurs at the HTTP transport layer, correct? Not at the AS4 message processing layer, right? You are talking about HTTP Basic Auth, right? Theo's question is really about the AS4 MSH use case for the ebHandler receiving a Pull Request with no WSSE token on the ...

Would like to just echo Theo's request. This has come up right out of the gate for the Interop Test we have just kicked off. In fact, with the interop test kicking off, the TC might expect a number of clarifications to be raised in the coming days and weeks.

Turns out that X509 signatures are optional for 4 of the 5 usage profiles in the SuperStream draft spec, so perhaps the definition of NRR in that context takes on meaning not dependent on signed messages. On 11/28/2012 1:53 PM, Jacques Durand wrote: Right for Section 5.1.8 , although the statement in ...