The present invention is generally directed to a method, system, and article of manufacture that avoid exposing the sensitive information (e.g., infrastructure details) to untrusted clients. For example, in one embodiment of the present invention, message destinations are protected from a client in an HTTP bridged scenario. Thus, according to one embodiment of the present invention, the replyTo message destination are obfuscated (e.g., via a hash function) and sent to the client as a replyTo address. Consequently, the embodiments of the present invention negate the requirement to expose the sensitive information to the untrusted client applications.