We just published an article by Keith Brown on how to properly use WS-Security UsernameTokens for your Web services.  Keith did a great job of talking about all the issues involved and with the help of Hervey we really hashed through all the issues that you should be aware of if you are considering using UsernameTokens for WS-Security.  This has certainly been a hot topic on the various newsgroups and I expect this to be a key piece for those WSE and other platform developers when looking for guidance around this popular technology.

   -Matt