At 07:58 AM 10/21/99 -0500, Steve Demuth wrote:
>Some vendors have this capability in their CORBA orbs. Visigenic's orb,
>e.g. can (pretty much tranparently) wrap IIOP in HTTP or HTTPS to tunnel
>through client firewalls.
Wrapping IIOP in HTTP seems extremely inefficient.
Are we all accepting HTTP as the only way to communicate on the web?
Yeah, I know... its firewall-friendly; but its so slow.
>My concern about this approach, whether it's SOAP or HTTP tunneling of IIOP
>is that it's a cobbled together solution for what should be a non-problem.
> We need to do a lot of evangalism in the corporate security community to
>convincingly demonstrate that properly configured, IIOP channels in their
>firewalls (and around their proxy servers!) are no more (and probably
>less), dangerous than the ubiquitous HTTP on port 80. The only reason
>we're even tempted to migrate to doing RMI/RPC via HTTP is because it's the
>lowest common denominator for security.
YES!!!!! Bingo!
I never understood all the corporate people saying that HTTP was safe
when everyone was tunnelling (wrapping) their favorite protocols and
getting in!
>As far as SOAP as a way to tie together CORBA, RMI and DCOM is concerned: I
>doubt that's Microsofts goal. Even if it is, XML is a small part of the
>solution. Any of us could write code to re-marshal and un-marshal IIOP or
>DCOM into XML very easily. But these three protocols are not semantically
>equivalent, and you can bridge them only with significant effort, or by
>applying (again) a least common denominator approach that throws away as
>much as it salvages.
Steve... if you run for president, I'm voting for you...
Unless, of course, Pamela Anderson decides... well, you understand.
Frank G.
+======================================================================+
| Crossroads Technologies Inc, 55 Broad Street, NYC, NY 10004 |
| Email: [EMAIL PROTECTED] Web: www.CrossroadsTech.com |
| Voice: 212-482-5280 x229 Fax: 212-482-5281 |
+======================================================================+
===========================================================================
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff EJB-INTEREST". For general help, send email to
[EMAIL PROTECTED] and include in the body of the message "help".
