Should the Keygen element be used to create a certificate for mutual auth TLS? What alternatives are there?
I have an ajax-ws web service (exposed via glassfish) that uses username authentication with a symmetric key to encrypt and authenticate clients(link). How secure is this mechanism? Is this enough to ...