WSEmail：基于Web服务的安全互联网消息系统回顾
WSEmail: A Retrospective on a System for Secure Internet Messaging Based on Web Services
AI总结：
WSEmail通过将电子邮件重构为Web服务家族，提供安全、可扩展且开放的替代方案，并用形式化证明和性能测试验证了其可行性。
摘要：
Web服务为重新设计多种旧系统以利用灵活、可扩展、安全的标准化优势提供了机会。在本工作中，我们重新审视了WSEmail，这是一个十多年前提出的系统，旨在通过将电子邮件重新设计为一系列Web服务来改进电子邮件。WSEmail提供了一种关于即时消息和电子邮件服务本可以如何演进的替代愿景，在分布式环境中提供安全性、可扩展性和开放性，而非当今丰富的消息系统所成为的加固型围墙花园。WSEmail的架构，尤其是其自动插件下载功能，允许在不更改基础协议或库的情况下进行丰富的扩展。我们通过三个业务用例展示了WSEmail的灵活性：安全通道即时消息、带路由表单的业务工作流以及按需附件。由于灵活性的增加常常会削弱安全性和性能，我们在设计WSEmail时考虑了安全性，并使用TulaFale和ProVerif自动证明工具正式证明了其核心协议之一（按需附件）的安全性。我们提供了在使用.NET实现的原型中对WSEmail功能的性能测量。我们的实验显示，在负载下每次事务的延迟约为四分之一秒。
英文摘要：
Web services offer an opportunity to redesign a variety of older systems to exploit the advantages of a flexible, extensible, secure set of standards. In this work we revisit WSEmail, a system proposed over ten years ago to improve email by redesigning it as a family of web services. WSEmail offers an alternative vision of how instant messaging and email services could have evolved, offering security, extensibility, and openness in a distributed environment instead of the hardened walled gardens that today's rich messaging systems have become. WSEmail's architecture, especially its automatic plug-in download feature allows for rich extensions without changing the base protocol or libraries. We demonstrate WSEmail's flexibility using three business use cases: secure channel instant messaging, business workflows with routed forms, and on-demand attachments. Since increased flexibility often mitigates against security and performance, we designed WSEmail with security in mind and formally proved the security of one of its core protocols (on-demand attachments) using the TulaFale and ProVerif automated proof tools. We provide performance measurements for WSEmail functions in a prototype we implemented using .NET. Our experiments show a latency of about a quarter of a second per transaction under load.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
