Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

What Is WS-Security?

April 26, 2017ws-security

0

Posted

What Is WS-Security?

1 Answer

0

Posted

WS-Security is a specification to enable security for Web services; specifically through message integrity, message confidentiality, and single message authentication. The WS-Security specification was co-authored by Microsoft, IBM, and Verisign and submitted to OASIS for ratification. On April 6 2004, OASIS (http://www.oasis-open.org) released OASIS Web Services Security 1.0 based on this specification. This standard includes recommendations for SOAP message security with profiles for using username and X509 tokens to enable security. Many vendors are now starting to provide implementations of WS-Security. Microsoft offers OASIS WS-Security 1.0 support in WSE (Web Services Enhancements) 2.0, a download from MSDN that complements the Web services support in the .NET Framework. Sun offers support for OASIS WS-Security 1.0 in JWSDP (Java Web Services Developer Pack) 1.5, which can be downloaded from their site. This article covers techniques to send secure messages between the .NET Frame