CODEWITHSUNDEEP
encryptionsslws-security
user437291
user437291

Reputation: 4651

Does WS-Security protocol require SSL

Does WS-Security protocol require SSL for encrypting messages and for authenticating clients using certificates, or is WS-Security protocol independent of SSL and thus it doesn't use SSL to perform the encryption and certificate authentication?

thank you

Upvotes: 1

Views: 778

Answers (2)

oluies
oluies

Reputation: 17831

You can encrypt and sign with WS-Security. That said SSL is a much more understood protocol with a very low overhead. SSL/TLS is not computationally expensive any more

So you should consider using SSL first and WS-Security if needed. WS-Security is an option if you use authentication based on security token formats, such as SAML, Kerberos, or X.509.

Upvotes: 2

basarat
basarat

Reputation: 276105

SSL (and newer TLS) is apparently an alternative to WS-Security so I doubt it to be the case that ws-security requires SSL. http://en.wikipedia.org/wiki/WS-Security#Transport_Layer_Security_.28Without_WS-Security.29

Upvotes: 2

Related Questions