Re: Web services & SSL

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

SSL is still an excellent way of securing your transmissions even
though you're not using a 'browser'. You're still using HTTPS so the
client (your proxy) will act in the same way as your browser and
encrypt the message as required.

There are other tools you could use to secure transmissions such as
WSE3, but SSL is great because it's tried and tested and takes place at
a higher level of abstraction- therefore you don't have to change
anything in your code to use it.

(Without wanting to cloud the issue, you might want to look at WCF
(windows communication foundation) for hosting your web service, which
takes this whole idea of protocol abstaction to whole new level with
its ABCs (Address, Binding, Contract) of web services.

Josh
http://www.thejoyofcode.com/

cn2006a wrote:
Hi, I am new to web services and have to write one end of a B2B
application, ie my app will talk to a remote app and vice versa. The
developer of the other end is suggesting we use SSL for security.

I'm still trying to understand the security options, and I'm slightly
confused about using SSL. My understanding is that when using HTTPS,
decryption happens in the browser rather than within IIS. Since I will
not be using a browser to talk to the other end, where does the
decryption take place? Do I call a library routine to do this? Or
should I look at securing this app some other way, eg something within
WSE?

Thanks,

ChrisN

.

Relevant Pages

  • Re: SSL Question :P
    ... >detect whether the browser is coming in on http or https, ... >> You have SSL enabled in your entire WEBSERVER. ... >> WEBSERVER, i want to be able to type the WEBSERVER ...
    (microsoft.public.inetserver.iis.security)
  • RE: how can you verify that the site you get is not a fake?
    ... > my bad for not clarifying it earlier.. ... In theory, when using https, your browser should alert you if the ... Most places let you change your own password online though an https ... use the ssl variations of pop or imap to avoid sniffing on your ...
    (Fedora)
  • Re: How to synchronize task list items with Outlook
    ... > This is exactly what I'm looking for, but how can we deal with SSL. ... browser with HTTPS? ... Do you get a warning in the browser that the certificate ... If you want a smart answer, ask a smart question ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: HTTPS
    ... specially the form where I collect SSN. ... verisign SSL certificate successfully. ... to make only a specific page https, ... >>>HTTPS url of the page in the browser. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Form Post Submittals - Sporadic? Caused by new patch?
    ... > So im guessing IE is doing something wrong with cacheing ... > Also its only happened on SSL pages so far. ... For reference my browser version is: ... >>>from my POST form gets passed to my perl5 cgi script ...
    (microsoft.public.windows.inetexplorer.ie6.browser)