2 Replies Latest reply: Oct 22, 2012 7:26 AM by jmz931 RSS

    ws-security

    jmz931
      maybe this is a stupid question but I'm a newbie in the topic.. if I have transport layer security with SSL + JAAS to authenticate the use of a JAX-WS webservice.. why do I need ws-security?
      regards
      jedo
        • 1. Re: ws-security
          jtahlborn
          user1107924 wrote:
          maybe this is a stupid question but I'm a newbie in the topic.. if I have transport layer security with SSL + JAAS to authenticate the use of a JAX-WS webservice.. why do I need ws-security?
          not a stupid question, as these topics can be a bit dense. short answer, you don't. ws-security is useful if you want to handle the security/authentication at the message level. since you are handling it at the transport level, you are good to go.
          • 2. Re: ws-security
            jmz931
            thank you very much for your reply ;)