Encryption
uCalling a web service via HTTPS encrypts the entire
message during transit.
uUse encryption for
individual elements of the web service message itself.
uWhen an intermediary
server receives the message, the sensitive data in that message is still encrypted by other
means.
uWS-Security protocol
allows individual XML blocks in the SOAP
message to be encrypted using different keys.
uAllows messages to be processed by multiple servers,
with each server capable of
accessing only the information that is intended for it.
uRemaining encrypted data
will be unreadable.
