The GlassFish Podcast has already provided some GlassFish audio, but this time Ed Ort brings us video with this interview of members of the Metro Web Services Security team. The interview, which was taped at the recent Hyderabad Sun Tech Days, starts off with interviewee background questions before it gets into the point-to-point vs. end-to-end security tradeoff (both of which Metro can do).

It then goes on to discuss the four main parts (specifications really) implemented today in Metro : WS-Security, WS-SecurityPolicy, WS-Trust, and WS-SecureConv (full list). The interview finally touches on the future beyond Metro 1.1 which is mainly about implementation of next versions of the specifications.

If nothing else, this is a good time to put a face on a name if you've been participation in the Metro mailing list or forum. If you're coming to JavaOne, you may want to write down this Microsoft/Sun session about interoperable web services.

A new Tech Tip written by Jiandong Guo of the Application Server Web Services Security team was just posted. Read the tip and learn the basics of WS-SecureConversation. Also see an example that demonstrates how to enable secure conversations for a web service through the WS-SecureConversation support in Metro. You can find the tip here. Setting up the infrastructure can be tricky, so if you're getting started with WS-SecureConv, this is a good document to read. You can get to all the Tech Tips from this site or this blog.