I've spent the last day or so looking into web services and security, a topic I've managed to avoid for quite a while. I've done lots of reading, which has left me less thaan clear on my options, and have now started on WSE 3.0. Sadly the documentation here is also poor - lots of half-hearted bits in the documentation for the toolkit, but very little in the way of practical usage. The samples themselves aren't simple enough to give a beginner in this a good understanding of what to do to just achieve the basics, such as securing a web server. My current error is "The security token could not be authenticated or authorized", which is better than the ones I've been getting. The docs have a nice table depicting errors messages, the cause, and the remedy. For this particular error, the remedy is "Investigate the source of the problem". Useful that. How niaive I was in thinking that investigating the problem I could turn to the documentation.
[Listening to: Symphony No. 9 in D minor ('Choral') Op. 125: 5. Recitative - Allegro assai - Karajan - Symphonies Disc 6]