Skip to main content

Dennis Sosnoski - Java Web services: WS-Trust and WS-SecureConversation

On IBM's DeveloperWorks site, Dennis Sosnoski has published Java Web services: WS-Trust and WS-SecureConversation:

WS-Security provides a comprehensive set of security features for Web service applications, building on established industry standards for cryptography and for XML encryption and signing. For many applications the features of WS-Security are essential, but they can come at a significant performance cost. Earlier articles in this series investigate how common WS-Security configurations affect performance for the main open source Java™ Web services stacks: Apache Axis2, Metro, and Apache CXF. A major part of the WS-Security performance cost comes from the wide use of asymmetric encryption...