Message transmission security is ensured through message signing, signature validation, and message encryption.
The following diagram illustrates the end-to-end secure message transmission flow.
Figure 1. Message transmission flow
-
Message signing and signature validation are required for all requests and responses.
-
Message encryption and decryption is optional. If a message contains sensitive information such as a password or certificate, we strongly recommend that you encrypt the message.
-
If encryption is adopted, encrypt the message body before it's signed.