Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

As far as I know, SOAP services have security standards recognized by OASIS and W3C, such as:

  • XML-Encryption
  • XML-Signature
  • SAML

Are there any security standards for RESTful services?

share|improve this question
1  
Depends on whose recommendations you'd want to adhere to, but yes, even NSA has some (PDF). There's even such chapters as Guidance for using HEAD and Consideration for use of SOAP :D –  TildalWave Mar 24 at 0:22
    
thanks a lot, that document was realy helpfull –  Hybrid24a Mar 24 at 1:31

2 Answers 2

up vote 1 down vote accepted

OWASP has some very good guidelines concerning the security of REST services.

share|improve this answer

In addition to the mentioned documents, these standards may be of your interest:

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.