WebService message security

[qpool.char]

Hello, i thought of posting to the Security forum, but decided to post my question here because it is strongly related to WebServices.

I m analysing Message security in combination with JAXWS WebServices.

The Java EE 5 tutorial says that XWSS supports deployment onto any of the following containers:

Sun Java System Application Server
Sun Java System Web Server
Apache Tomcat servlet container

I like to have application-sided message security, so that you dont have to configure any JBoss server or deployment descriptors.

Now my question: Is JBoss able to handle this type of message security? If yes, is there any helpful tutorial for it?

thx in advance!

[qpool.char]

hmm, isnt there anyone who knows if JBoss can handle message security? :(

[acxjbertr]

This might help:

http://wiki.jboss.org/wiki/Wiki.jsp?page=JBossWSSpecStatus