how to provide security for webservices

Certificates? Can you provide more info on this??? I am aware of WSS secutrity handlers but havent heard about certificates.. Much info is higly appreciated very much familiar with Tn certificates but not WS.

Secure webservices via HTTPS. include all certificates along with username n passwords n viola. Proper security implementation.

Add separate endpoint alias then provide access based on username and password with acl

secure transport layer with HTTPs and secure your message using uname/pwd...that should be good enough..

Thanks all