Re: Comparison of ICAP and SOAP

Hi Rezaur,

A comment on security regarding iCAP.

"Rahman, Rezaur" wrote:

> 4. Security
> ICAP: The ICAP uri needs to be in the clear to be able to reach the service,
> which can easily be snooped by a third party. One needs to provide secure
> tunneling mechanism.
Authentication is provided using the mechanism described in RFC 2617.
Similarly to HTTP, if privacy is necessary, additional mechanisms MAY be used,
such as encryption at the transport level or via message encapsulation.

Regards,
-Al