3.7.6 Security

Security has an important role in the design of ebXML. The common security risks are: Unauthorised access, data integrity and confidentiality and denial-of-service or spoofing.

The W3C XML Signature specification is used for digital signatures and XML Encryption for encryption. Certificates are used to do signatures.

It is worth noting, that it should be possible to edit the SOAP Header, e.g. the TraceHeaderList, while the rest of the message is encrypted.