Web Services Security

WS-Security is not a complete security solution in and of itself. It is a protocol for exchanging security information between message senders and receivers. Developers need to design an appropriate security solution and deal with potential threats, such as replay attacks.

The Web Services Enhancements (WSE) supports security tokens based on the following credentials:

• Kerberos version 5 ticket

• User name and password

• X.509 certificate

0 0

Post a comment