web services - JSON/REST over HTTPS + WS Security possible? -


we have new security person @ office doing penetration tests on apis i've put in place.

he pointed out not using ws security on top of json/rest service exposing on https outside world.

my question is, is possibly combine ws security json/rest services?

to knowledge, ws security have nothing json/rest service @ all.. used regular web services, embedding security elements in soap envelope. but, not using soap apis...


Comments

Popular posts from this blog

timeout - Handshake_timeout on RabbitMQ using python and pika from remote vm -

gcc - MinGW's ld cannot perform PE operations on non PE output file -

c# - Search and Add Comment with OpenXML for Word -