Search code examples
encryptionsslws-security

Does WS-Security protocol require SSL

Does WS-Security protocol require SSL for encrypting messages and for authenticating clients using certificates, or is WS-Security protocol independent of SSL and thus it doesn't use SSL to perform the encryption and certificate authentication?

thank you

Solution

  • SSL (and newer TLS) is apparently an alternative to WS-Security so I doubt it to be the case that ws-security requires SSL. http://en.wikipedia.org/wiki/WS-Security#Transport_Layer_Security_.28Without_WS-Security.29