posted 11 years ago
Generally, you wouldn't use WSS4J directly, you would use the declarative facilities of Metro. There may be circumstances where WS-Security being applied programmatically (via WSS4J) is advantageous, but those are few and far in between.