Private WSDL

penylane · September 7, 2011, 3:11pm

Hello all,

I am a newbie in WebServices. I wonder if all WSDLs are public? Aren’t there any WSDLs that are kept after a login process like in OWASP’s WebGoat project?

Thanks in advance.

penylane · September 8, 2011, 7:23am

It means that it happens but in so rare situations. Thanks a lot for your reply.

wwb_99 · September 7, 2011, 4:15pm

Completely private WSDL is kind of self-defeating, no? There are some folks who hide the WSDL so as not to expose their API, but that is getting to be rarer and rarer these days. Hiding your WSDL is fundamentally security by obscurity which is never a good thing to rely upon.