Java web services: The high cost of (WS-)Security
See the original posting on IBM developerWorks – Java
WS-Security offers powerful features for securing web service
applications, and for many applications these features are essential. But these
features come at a high cost in terms of performance and message overhead. Dennis
Sosnoski continues his Java web services column series with a look at how using WS-Security or WS-SecureConversation affects Axis2 performance, and he discusses when the simpler (and better performing) alternative of HTTPS-secured connections is a more appropriate choice.