Some Thoughts about SOAP versus REST on Security
http://www.prescod.net/rest/security.html

Prescod.net

Abstract:

REST is the underlying architecture of the World Wide Web and its two core specifications, URIs and HTTP. It has been proposed that instead of using new-from-scratch Web Services technologies we can get much more bang for our buck by understanding the full generality of what we've got. A community has arisen around this idea and we spend our time proving that what the Web already has is better than what is being developed. This page addresses the security weaknesses of the SOAP approach.