[2008] WCF and WSE 3.0

[Oliver1]

Hi,

I'm hoping someone can help me out of my pit of confusion.

I'm just looking at how to make a secure webservice. Am I correct in thinking that WSE was designed to add security into the 2.0 framework. While in .NET 3.0 and 3.5 everything has shifted slighty and you would use WCF to create and secure your webservice?

Or put it another way what tools\concepts do I have to be aware of to create a completly secure web service?

Any general help would be great.

Thanks.

[mendhak]

Yes, WSE was created based on the WS* specifications for security. Then WCF came out and it encompasses all of the previous concepts, so even if you have a WSE web service, you could migrate it over to WCF.

As for the security, read
http://msdn.microsoft.com/en-us/library/ms735093.aspx

[Oliver1]

Thanks, my head was about to explode yesterday.
I'll keep reading through msdn and see what I can find on WCF.

[mendhak]

If you bandage your head really tightly, the explosion can be contained in a manner that allows your cranial functions to continue.

Post back if you have more questions.