Network eavesdropping may lead to disclosure of confidential information even though the SOAP message body is encrypted! How could this be possible you ask?

Read on... http://blogs.msdn.com/thehoggblog/articles/518574.aspx