> Do you mean you are ok with UT requests which are not part of > the SecureConversation flow being accepted as well ?
Yes, they are fine. CXF should answer to an UT request in plain text and to a SecureConversation request in something unreadable. cheers Karl
