The Problem of Handling Multiple Headers in WS-Security Implementations

This paper discusses some practical problems encountered when generating multiple WS-Security confidentiality headers to be handled by different intermediaries along the SOAP message delivery chain of a real banking application. A patch using a special-purpose encryption component is described.