XML & Web services: Security Issues: Authentication and Encryption
When using Web Services, how to authenticate users and make the XML messages confidential? We need to implement very strong security policies.
- Posted by: Z Huang
- Posted on: November 17 2004 13:40 EST
Check out Web services security. Recently Sun has released a new Java Web services Developer Pack which has support for WS-Secuirty.
Some of the appserver vendors also have support for this spec.
WS-security is an option, but you can always use https for the Encryption and use certificates for Authentication of your users.
This is wellknown and is secure.