Web service security - Threats and Countermeasures - Part 4 : Message Protection – Sign and Encrypt and Encrypt Signature!
Network eavesdropping may lead to disclosure of confidential information even though the SOAP message body is encrypted! How could this be possible you ask?
Read on... http://blogs.msdn.com/thehoggblog/articles/518574.aspx
