Yeah, REST, gives you none of that. Thats all done by HTTPS. Using that logic XML (ergo SOAP) has all that for free as well.

Of course HTTPS only applies to transport, not storage...