At work, I've looked into implementing WS-Security today. Apparently, WSRF::Lite solves this headache just fine. I installed the prerequisites from CPAN and the module compiled and installed without any problems. It comes with a wsrf_client.pl test script that pretty quickly (with some iterations for changes on the server, one ntpdate call, ...) verified that it works. To work with a .NET server, you have to use the same trick as with SOAP::Lite, though: add a ->on_action( sub { sprintf '%s/%s', @_ } ) line to the WSRF::Lite call. All in all: sweet!