SSL and WS-Security

From: Brendan Nolan (brendan.nolan@aztech.ie)
Date: 01/17/03


Date: Fri, 17 Jan 2003 14:54:13 +0000
From: Brendan Nolan <brendan.nolan@aztech.ie>


I've created a test webservice using the WSE from Microsoft.

I'm signing and encrypting both the SOAP Requests and Responses and it
all works great. I'm also sending a Client Certificate to the web
service to map it to an NT Logon. All this is running over HTTPS.

Considering the extra overhead of the SSL connection am I really
introducing needed extra security?

Thanks in advance

Brendan