Evans Data Corporation reports in its Spring 2005 Web Services/SOA Development Survey that developers working on authentication methods for Web services are more likely to rely on their own custom-developed methods, rather than industry-standard methods like SSL or SOAP. Almost one in four developers (23%) say they have devised their own security mechanisms to protect Web services transactions, versus 22% using SSL, and 9% using SOAP headers. Additionally, the survey finds that, for a quarter of developers, authentication remains the largest problem in Web services security schemas.
Eight of ten companies (79%) say they encounter organizational headwinds when attempting to move their Web services efforts forward. About one out of five respondents (19%) also say they can't find enough IT talent versed in Web services development.