I’m new to WS. I have two MS Press books in front of me : XML Web Services
Step by Step and Understanding Web Services Specifications and then WSE.

The prior suggests to secure WS by using IIS and ASP.NET techniques
(<authorization> in web.config). The later, of course, describes WS-Security
and the WSE implementation.

I didn’t found any good article comparing one technique versus the other. I
can guess this is all a question of interoperability…

The only thing I need for now is to control access to a simple WS. This WS
will be available from the Internet via SSL, running on a server that is not
part of a domain (controlling access by local users only). I don’t need
signing or encrypting.

Can anybody give me some advices?

Thanks