Which is more secure: RESTful or SOAP based web services?

Profile: hsingh82ggn
RESTful Web services
Web services
I am new to web services and want to learn about it. I have tried both SOAP and restful webserviuces. I have following queries:
  1. SOAP or Restful: Which is more secure?
  2. Can we have HTTPS based URLs for Restful web services?
  3. Do we have any inbuilt support for security for web services in any frameworks like: Spring etc?

3 Replies to this discussion

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members reply.
  • carlosdl
    1) For most cases, both SOAP and REST services can be secured to the desired level.  SOAP supports some additional security features provided by WS-Security, but those are not commonly needed.

    2) Yes

    3) Spring-WS seems to cover WS-Security, although I think that you can do most of the required configurations on the application server, without using any additional framework to develop the application.
    86,030 pointsBadges:
  • dagdus
    3.Spring Security uses specific classes for web and method security.
    Authentication and Authorization are two main operations are included in Spring Security.
    Spring security handles all security aspects in case of authentication and authorization.Its having authentication security filters.
    160 pointsBadges:
  • Veretax
    It's not an either OR in my opinion.  You can have insecure versions of both.  That's why you need your teams to be trained to not just look for vulnerabilities after the fact, but to design in a way that prevents them long term.
    8,675 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: