Dear fellow ranchers,
For a particular use case where I need real end-to-end security I am calling an external webservice. I mocked the webservice on my machine on another port (without security requirements). I am able to call the webservice (without any web service security implemented) as I signed my jar.
The problem is that I need to implement WSS to get the request signed in order to call the 'real' webservice. I am wondering how this could be done, bearing in mind that my applet should not get too large as it is an applet

- so preferably without using any frameworks. Any body has any resources or experience on this? I'm not really sure what would be the best approach to get this started.
Thanks a lot!
B.