Hi list, In the jax-ws 2.2 spec, section 5.2.2 it says:
"An Endpoint that uses the SOAP 1.1/HTTP binding (see 10) MUST make its contract available as a WSDL 1.1 document at the publishing address suffixed with ”?WSDL” or ”?wsdl”." When we develop clients against a soap/wsdl web service, we may or may not include the ?wsdl in the URL of the service. When I read this: http://csrc.nist.gov/publications/nistpubs/800-95/SP800-95.pdf The document mentions in several places that allowing users to see the web service implementation details can be dangerous, if you are deploying secured web services. If a web service client does not need to include ?wsdl as part of the endpoint when invoking the web service, why did the jax-ws spec use the word MUST in section 5.2.2? leo
