What application level security cannot do

 

Application level security is not a complete solution. Even if you implement application level security, you might still require some link level security services. For example:

• When a channel starts, the mutual authentication of the two MCAs might still be a requirement. This can be done only by a link level security service.

• Application level security cannot protect the transmission queue header, MQXQH, which includes the embedded message descriptor. Nor can it protect the data in WebSphere MQ channel protocol flows other than message data. Only link level security can provide this protection.

• If application level security services are invoked at the server end of an MQI channel, the services cannot protect the parameters of MQI calls that are sent over the channel. In particular, the application data in an MQPUT, MQPUT1, or MQGET call is unprotected. Only link level security can provide the protection in this case.

 

Parent topic:

Comparing link level security and application level security

sy10470_