Understanding WS-Security

The WS-Security specification defines a new SOAP header. To understand what the WS-Security SOAP header contains, I think it would be helpful to look at the schema fragment for the element first. <xs:element name="Security"> <xs:complexType> <xs:sequence> <xs:any processContents="lax" minOccurs="0" maxOccurs="unbounded"> </xs:any> </xs:sequence> <xs:anyAttribute processContents="lax"/> </xs:comple

[yyamano]

“ The nonce is 16 bytes long and is passed along as a base64 encoded value. The way this works is that the client creates the password hash using all of this information plus the password. ”