 | |
  | ||
| ||
| ||||||
| ||||||
Web Services1. Simply using SSL to secure a web service works pretty well today because so many platforms support SSL 2.
WS-Security relies on existing technologies:makes it harder to secure advanced features like routing with intermediaries doesn't work so well if the transport isn't HTTP all of the above SOAP, XML Authentication and XML Key Distribution 3.
An XML signature indirectly protects contentXML Canonicalization, XML Signature, and XML Encryption WS-Trust and WS-SecureConversation by digesting each block of content along with an identifier, then signing the digests 4.
The Security headerby asking a trusted third party to sign the digest of each block by encrypting it with the signer's public key has no specified order is ordered in such a way that the message can be unwound by decrypting and verifying signatures in the order they appear in the header is required in all SOAP messages |