Talk:Ispman.soap.server

From ISPMan

Jump to: navigation, search

coricbocvi darliletotro elcadarc4tou pasric Is there any particular advantage to running the SOAP server as a seperate daemon? For a project I've just finished, I used SOAP::Lite via an Apache mod_perl so that .Net clients can access it. Then everything is managed in one place, and the security features of Apache can be utilized.

What about the security implications of using SOAP?

--Wim

For a "real" implementation that's probably the best way to do it. The current ispman.soap.server is more a case study, rather than anything you could/should use in production.

SOAP itself is just a "protocol", so you certainly want to secure it properly. My plans for the SOAP interface are to use authenticated sessions (session tokens) together with a optional but recommended SSL encryption.

--Joerg

Retrieved from "http://wiki.ispman.net/index.php/Talk:Ispman.soap.server"