web services - JSON/REST over HTTPS + WS Security possible? -
we have new security person @ office doing penetration tests on apis i've put in place.
he pointed out not using ws security on top of json/rest service exposing on https outside world.
my question is, is possibly combine ws security json/rest services?
to knowledge, ws security have nothing json/rest service @ all.. used regular web services, embedding security elements in soap envelope. but, not using soap apis...
Comments
Post a Comment