web-services - Where can I find some good WS-Security introductions and tutorials?

Question

Can anyone point me to some decent introductions to WS-Security?

I'm looking for tutorials or something that provide a fairly gentle introduction to the subject, though I don't mind if it assumes basic knowledge of web services and SOAP. Most of the stuff I've seen so far is very technical and you need a lot of complex, detailed background knowledge to understand it properly.

We have to implement a web service in PHP and one or more clients in .NET, so resources covering both would be much appreciated.

Answer 1

I think the best introduction to the (any) subject are some good examples.
This article at codeProject gives a fairly easy to follow guide trough web service security for a .NET application.

Answer 2

几个月前，我不得不给自己上 WS-Security 速成课程，这里有一些我觉得很有帮助的链接：

http://www.ibm.com/developerworks/webservices/library/ws-security.html

http://www.devx.com/security/Article/15634

http://www.devx.com/Java/Article/28816

Answer 3

查看Kirk Evans 的博客，因为它处理 .NET Framework 2.0+ 而不是Sven链接的旧 .NET Framework 1.0 。

Evans 博客上的实现向后兼容运行 .NET Frameowrk 1.0 的客户端。

Answer 4

您可以在WSO2 Online Library中找到一些关于 WS-Security 和Apache Rampart（开源 WS-Security 实现）的好文章。

WSO2 WSF/PHP是一个 PHP Web 服务扩展，它支持 WS-Security 并且还与 .NET Web 服务/客户端无缝互操作。