Introduction

In this chapter, we cover recipes related to transport-level security, which represents the technique where the underlying operating system or application servers are handling security features. For data confidentiality, the Secure Sockets Layer (SSL) is often used to provide encryption. If a message needs to go through multiple points to reach a destination, each intermediate node (that is, an OSB) must forward the message over a new SSL connection. The original message from the service consumer is not cryptographically protected on the intermediary nodes and additional computationally expensive cryptographic operations are performed for each new SSL connection that is established.

Message-level security has been covered in Chapter 11, Handling Message-level Security Requirements.