Web Services Encryption

[Random]

I am becoming familiar with the standards and practices of secure Web
Services, particularly encrypting the messages with Tokens. What I don't
understand, and I can't find in documentation, is what type of encryption is
used with the tokens, and how the key(s) are passed from the client to the
service to decrypt the message. I need to know this so I can be assured
that an intercepted message cannot be decrypted just by using the
information in the message itself.

[Paul Glavich [MVP - ASP.NET]]

You are better of asking this question on
microsoft.public.dotnet.framework.webservices.enha ncements

From my understanding is that there are a number of methods that can be used
for encryption, and that is defined in the header of the SOAP packet. If you
use a tracing tool, you will see references to encryption methods, and
perhaps the algorithm used (but not always). Its quite a large subject and
you are better off in the above mentioned newsgroup.

--
- Paul Glavich
Microsoft MVP - ASP.NET


"Random" <cipherlad@hotmail.com> wrote in message
news:uA5MrKelEHA.2884@TK2MSFTNGP09.phx.gbl...

> I am becoming familiar with the standards and practices of secure Web
> Services, particularly encrypting the messages with Tokens. What I don't
> understand, and I can't find in documentation, is what type of encryption

is

> used with the tokens, and how the key(s) are passed from the client to the
> service to decrypt the message. I need to know this so I can be assured
> that an intercepted message cannot be decrypted just by using the
> information in the message itself.
>
>