Conclusion

Whether youre a provider or consumer of XML Web services, its critical that you implement security techniques that best address the threats to your application. WS-Security provides the building blocks for securing your Web services, but its up to you to architect your applications securely. WSE provides fairly comprehensive support of WS-Security and its related specifications, which can be used to implement the most critical support for security, namely digital signatures, security tokens, and encryption. We will see in the following chapters that other specifications, which leverage these features, can be used to provide even more security for SOAP messaging with respect to secure conversations and token issuing.