1
vote
1answer
722 views

How does a developer interact with Microsoft Certificate *Web Services*

Microsoft Certificate Web Services is a HTTPS web service (WS-Trust) that has no Kerberos dependency and can be used on a variety of devices. This is new in Windows 2008 and is separate from the ...
6
votes
2answers
415 views

Does anyone use XML Encryption?

The XML standard defines a mechanism for encrypting the data in a XML document. It's part of the standard. Does anyone use this XML encryption format? Are there any significant deployed systems ...
1
vote
1answer
158 views

Does an exposed XMLRPC API in a web application pose a threat?

I'm given the assignment of testing one of our web-servers in regards to security. One of the servers run IIS 7 and its application relies extensively on XMLRPC calls. I found the API for those calls ...