Pete Finnigan's Oracle Security Weblog

I came across Colin’s post today on his web log. You may remember Colin’s posts about WS-Security recently. Colin’s post today is called "Reducing the scope for encryption" and gives a detailed explanation on how to not encrypt the entire contents of the SOAP body, as Colin says the default behaviour is encrypt and decrypt the entire contents of the body using the JDeveloper facilities. Colin gives a great example of how to save server and client resources by only encrypting a credit card field in a step through example. As usual Colin’s posts are well worth reading for anyone interested in JDeveloper and Oracle security.