Re: Webservice Security

So... either no one is really using web services yet on iSeries (except for
maybe Scott Klement's HTTP API version)...or else no one is bothering to
secure their web services?

Would that be a valid conclusion to draw from the lack of responses to my
query?

Man, I'd hate to think that I'm the only one out there who uses web services
with Websphere in production on the iSeries!





-----Original Message-----
From: wdsci-l-bounces@xxxxxxxxxxxx [mailto:wdsci-l-bounces@xxxxxxxxxxxx] On
Behalf Of Shannon ODonnell
Sent: Thursday, January 24, 2008 1:46 PM
To: 'Websphere Development Studio Client for iSeries'
Subject: [WDSCI-L] Webservice Security

Is anyone who is currently using web services on iSeries, using anything
other than SSL to provide security for your web services?




That is, are you using WS-Security, for example? Do you sign something like
a digest message and use the Apache Axis Digital Signature verifier class to
decode the signed digest to ensure that it is valid?



Some other method(s) to provide security?



Do you require a valid iSeries user ID and password? Is that secure enough
for you, if you do, and you don't do anything else?



I'm very interested in finding out what others are doing to provide security
for their web services.



Thanks!



Shannon O'Donnell