|
|
37 of 37 people found the following review helpful:
3.0 out of 5 stars
So, who should really read this book?, January 28, 2004
By A Customer
This book basically explains what was prior to web services and why it was bad. Then it lists advanced features to be addressed in order for web services to work in real life. However, it seems to be totally out of touch with today's reality in which those very issues are being addressed as we speak.When discussing security, trust, and authorizaton, the author takes his time to beat SSL to death, but does not even mention the standards directly addressing end-to-end security and authorization, such as XML-Security, WS-Security, XKMS, SAML etc. Liberty Aliance and Microsoft Passport are mentioned once in a single sentence as technologies that "support single sign-on". Granted, those technologies are still in flux, but, contrary to the editorial review, they do NOT change on the month-to-month basis, but are there to stay. They are backed up by the industry and have several commercial and open-source implementations. Without the knowledge of at least those buzzwords, one would fail miserably an interview on an architect, developer, manager, or an executive position related to web services. Some abbreviations, like WSN (web services network) appear to be the author's invention not corresponding to anything real out there. Just try to search on the internet, and the closes match would probably be "Western Society of Naturalists" or "Wedding Services Network". Some of the author's opinions seem to come from nowhere, not being backed up by any references. For instance, his view of XML firewall that may, among other things, do billing (p. 208) is a bit strange. It's always been a part of the business logic ... or should firewalls distinguish prefered customers, promotional rates, holiday specials, etc. ... :)? The same applies to XML firewalls doing XML conversion (commonly part of the business logic performed as part of a business workflow). When discussing web services orchestration and transactions, the author does not mention ebXML, BPEL, BTP, WS-Transaction, WS-Coordination, etc. Again, I understand this is a book of concepts, but it should've at least mentioned the most important web services-related buzzwords to keep its readers in touch with reality. To summarize, I just don't see how this book could benefit its targeted audience (developers, arhitects, managers, and IT executives) in making educated decisions about web services technology. I'd recommend reading "Web Services Security" by Mark O'Neill et al just to compare the coverage of security. This book also does not contain a single line of code and explains web security concepts to architects and developers. However, Mark is totaly relevant and up-to-date, cleraly riding the web services wave.
|