Giants move forward on security standard
WS-Security defines a set of Simple Object Access Protocol (Soap) message header extensions for Web services integrity and confidentiality. Leading Web services proponents IBM and Microsoft, along with IT security company VeriSign, developed the draft of WS-Security. Moving it to Oasis is the first step in what may be a long evolution leading to its final release.
A solid standards framework is considered vital if Web services are to be used with third parties, and not just by in-house staff and a few trusted external groups. But security needs vary depending on the service, how it operates, and the equipment used.
[ Read more ]