[RAMPART-108] Policy Validator doesn't check the transport when Transport binding is used with HttpsToken

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.4
• Assignee: Nandana Mihindukulasooriya
• Reporter: Nandana Mihindukulasooriya
• Created: 09/Nov/07 08:01
• Updated: 27/May/08 05:12
• Resolved: 08/Jan/08 12:25

Description

When a transport security binding is used wih HttpsToken, PolicyBasedValidator doesn't check whether the incoming transport was HTTPS. This allows a service to be accessed via HTTP ( violating the policy), if a HTTP endpoint is available.