Re: WHAT'S BEST OF SECURITY TOKEN ?
From: leighsword (leighsword_at_163.net)
Date: 10/07/04
- Next message: Julie Lerman: "Re: How to debug in function AuthenticateToken()"
- Previous message: Shen: "Re: How to debug in function AuthenticateToken()"
- In reply to: Julie Lerman: "Re: WHAT'S BEST OF SECURITY TOKEN ?"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 7 Oct 2004 10:27:10 +0800
wow,it's very clear,thanks.
to username token, the X509 token is secure ,but slow.
if using pvkimprt.exe + makecert.exe to make a x509 certificate ,is it still
secure?
or i need to buy a CA certificate from Big company,microsoft or whatever?
thank for your kind again.
"Julie Lerman" <jlermanATNOSPAMPLEASEthedatafarm.com> дÈëÓʼþ
news:%23e%23W%23J7qEHA.1952@TK2MSFTNGP12.phx.gbl...
> X509 and UsernameToken's are very different in nature and x509 is many
many
> many times more secure. There are other options, such as creating a
> symmetric key and using a security token.
>
> However a few differences...
>
> In WSE2, except for authorization where you use a UsernameToken, the
> X509Token is the easiest to work with. Especially if you want to do all of
> your work by way of the WSE settings tool. Of course, using the tool to
> create policies will only give you a limited range of policies that you
can
> work with. But you can use the tool if you only need to do the most
> straightforward security and policies.
>
> If you dig a few days back into the newsgroup, you can see a message from
me
> where I was attempting to use usernametokens for a secure conversation. It
> is quite possible to do, yet it means learning a lot and also creating a
lot
> of custom classes so it is a lot more work..
>
> Although encrypting messages with an X509 certificate is a lot slower,
WSE2
> will automatically use a different algorithm whereby you still get the
great
> security that X509 provides, but the message itself is encrypted with a
> symmetric key. WSE2 will do all of this automatically when you provide the
> X509.
>
> Bottom line...X509 is MUCH more secure for signing and encryption - let me
> just say like a gazillion times, although that would be a slight
> exaggeration.
>
> hth
> julie lerman
> "leighsword" <leighsword@163.net> wrote in message
> news:elbEGv2qEHA.4008@TK2MSFTNGP14.phx.gbl...
> > X509 TOKEN?USERNAME TOKEN?...
> > WHAT'S FASTEST OF SECURITY TOKEN?
> > WHAT'S SAFE OF SECRUTY TOKEN?
> >
> >
> > REGARDS.
> >
> >
>
>
- Next message: Julie Lerman: "Re: How to debug in function AuthenticateToken()"
- Previous message: Shen: "Re: How to debug in function AuthenticateToken()"
- In reply to: Julie Lerman: "Re: WHAT'S BEST OF SECURITY TOKEN ?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
