This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit

Talk:Web Services

Jump to: navigation, search

I checked the OASIS website for the WSA specifications as stated in chapter 11. There seems to be no such thing as a WSA spec for Web Services Architecture. There is, however a WSA spec: Web Services Addressing. I'd like to propose to change the text to:

WS-Security specification (WSS) was originally developed by Microsoft, IBM, and Verisign as part of a “Roadmap”. WSS served as the foundation for all other specifications in this domain, creating a basic infrastructure for developing message-based security exchange. Because of its importance for establishing interoperable Web Services, it was submitted to OASIS and, after undergoing the required committee process, became an officially accepted standard. Current version is 1.1.



This passage is a bit dated. Are there any updates on WS-Federation?

"WS-Federation, directly competes with the work being done by the LA consortium, and, although it is supposed to be incorporated into the Longhorn release of Windows, its future is not clear at the moment"