[rest-practices] security requirement anyone?

[Bill Burke]

Any encounter any new specific security requirements beyond basic 
web-container security?  I'm looking to gather REST specific 
requirements to implement within RESTEasy and/or Picketlink.

So far its:

OAuth 2.0 (much easier to support than 1.0)
Messaging signing


Thanks,

Bill

-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com