Signatures
uEnsure integrity of transmitted data:
ØUse private key and a public key
ØPrivate key used to sign a block of data
ØPublic key used to determine whether the data has been modified
§Verifies that no signed data has been changed during transit and rejects any requests that have been modified.
uExcellent method of establishing the authenticity of users and the integrity of messages.
ØMay not be usable in all system architectures.
ØEach user of the web service must have a digital certificate and the means to add a signature.
ØThe web service must know in advance which digital certificates it can trust.