Section 14.14. What about web services security?

14.14. What about web services security?

Security is a paramount concern for web services, especially since XML is essentially text. Many layers of security can be applied to XML exchanges. For example, HTTPS can be used to encrypt the data stream on the wire. Message-level security provides another level of security and encryption that can be very useful. To achieve this more granular level of security, WS-Security describes how to include encryption and digital signature headers in SOAP messages. WS-Security is one of many WS-* protocols or standards. These standards address many advanced web services requirements, such as reliable message exchange, stateful interaction, message exchange profiles, and so forth. Most of these are in the process of being developed or are not yet widely adopted.

Web services are no longer new technology; they are the basic building blocks of SOAs. Nonetheless, having an understanding of web services basics will serve you well as you delve deeper into the details of enterprise services development. With this understanding of web services in mind, Chapters 15 and 16 examine methodologies for creating web servicesand enterprise servicesusing SAP NetWeaver.