 WS-SecureConversation is meant to provide an extensible framework and a flexible syntax, with which one could implement various security mechanisms.It does not by itself guarantee security, but the implementor has to ensure that the result is not vulnerable to any attack.Following a pattern similar to TLS, WS-SecureConversation establishes a kind of session key.