The folks at CBDI report a simply incredible story:
This week certain analysts are reported as advising firms to ignore the Web Services Security standards and to rely on vendor provided technology even though it may not comply with the standards. Then to confuse matters further they recommend companies implement simple point-to-point Web Services that can be secured using mature technologies such as SSL and digital certificates. Now whilst we agree with the use of SSL in many situations, it doesn't move us forward, and it sounds as if the analysts in question are massively confusing their customers. Of course it might just be the problem is with the messenger, but our guidance is that in this area simple messages are highly dangerous.
I am sorry, but are these analysts completely insane? So they know what they are talking about? It is not that the WSS path is *the* only way to go - but the way they try to convince customers to use and employ Web services is driving us into the wrong direction: backwards to where we are coming from and where we try to escape from ...
Fortunately, my friends at CBDI do a good job in clarifying the situation.
Read: Why I never believe in analysts' messages - unbelievable!