I want to apply web service security according to OWASP Web Service Security. Thereby I stumbled over the two points: …