Re: Web Services and SSL

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

You don't need to do anything diferent in development to publish a Web Service in SSL.

You can use WSE 3 with UserNameToken assertion to validate the username and password http://msdn2.microsoft.com/en-us/library/aa480575.aspx

"AndyBrew" <AndyBrew@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:749EFCE3-BD33-4682-A253-B47EE0E38B1D@xxxxxxxxxxxxxxxx
Hi

We are currently embarking upon a project to develop a suite of web services
to allow the integration of a PDA application with our data server. Our
current thoughts are to setup an SSL certificate on the server and use a
custom username/password authentication mechanism for authentication.

I have reviewed the MSDN documentation with regards security etc. but
haven't found many practical examples, so my questions are: -

1. Do we need to do anything different with regards the development of the
web service to support SSL or does it just work.

2. Are there any good links to documents I have missed?

Thanks in advance

Andy

.

Relevant Pages

  • Re: Web Services and SSL
    ... Service in SSL. ... custom username/password authentication mechanism for authentication. ... web service to support SSL or does it just work. ... For Username and Pwd, you can use SOAP Headers Authentication in your ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • How do you secure a web service?
    ... method calls have authentication in the SOAP header. ... Right now the username ... of using SSL, but am slightly concerned about performance. ... what is the best method of securing the web service? ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Validating a DataSet passed to a Web Service
    ... You could use a Strongly Typed Dataset. ... I am authenticating each web service ... > request with a username and password and is using SSL. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: WSE 3.0, usernameOverTransportSecurity, custom Token Manager w/ securityTokenManager,
    ... I now have the web service configured properly and the ... Using the custom Assertion "MyCustomAssertion" I ... "The username token is not present in the message" ... Microsoft.Web.Services3.Security.Security security) ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: WSE 3.0, usernameOverTransportSecurity, custom Token Manager w/ securityTokenManager,
    ... An username token was not being added in the proxy. ... I now have the web service configured properly and the ... Microsoft.Web.Services3.Security.Security security) ... protected override string AuthenticateToken(UsernameToken ...
    (microsoft.public.dotnet.framework.webservices.enhancements)