It's not possible to move WS-Security to the transport layer. The reasons are:
* WS-Security is implemented in JAX-WS/JAX-RPC handlers
so there's tight junction of WS-Security with MessageContext.
And MessageContext is constructed during the request/response
huge processing.
* WS-Security is highly configurable from Endpoint point of view.
Users can specify custom WS-Security configuration for particular
port or port operation. In transport layer the information i.e.
operation that will be executed is unknown.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4128665#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...