web services - JSON/REST over HTTPS + WS Security possible? -


we have new security person @ office doing penetration tests on apis i've put in place.

he pointed out not using ws security on top of json/rest service exposing on https outside world.

my question is, is possibly combine ws security json/rest services?

to knowledge, ws security have nothing json/rest service @ all.. used regular web services, embedding security elements in soap envelope. but, not using soap apis...


Comments

Popular posts from this blog

gcc - MinGW's ld cannot perform PE operations on non PE output file -

How to connect android app to App engine -

hadoop - Running Map Reduce Job shows error - Mkdirs failed to create /var/folders/ -