Is web services security stable enough to be used in real world. I am confused with XML signatures, WS security , XML encryption etc. What is the future of Web services security?
IMO, although there are more and more new terms in security, the idea never changes! Encryption is the only means to perform confidentiality, while digital signature is the most common way for authentication. The method to carry them out maybe differ, say algorithms used, using RSA or ECC, DSA etc, or using other ways, like XML DS etc, the idea does not change much, just the method changes. Thus, I will think Web Services security is just a subset of current security measurement, instead of new stuffs. In anytime, Web Services security will still be based on the existing security mechanisms. Nick
0
