Senator Guerra Souty original series calendar,replica hublot blue steel peach pointer collocation of rolex replica Rome digital scale, track type minute replica watches scale shows that the classical model is swiss replica watches incomparable, wearing elegant dress highlights.
mr-ponna.com

 

YOU ARE HERE: HOME Questions How to provide security in NET web services



ASP.NET Web Services and Security

View(s): 24231

How to provide security in .NET web services

Answer 1)


Following are few authentication technics to secure a .NET Web Services

  1. Windows-Based Security
    1. Basic Windows Authentication
    2. Digest Windows Authentication
    3. Integrated Windows Authentication
  2. Custom Authentication
    1. Log-in Method
    2. SOAP Headers
    3. SOAP header with cookie
    4. SOAP Extensions
    5. SOAP extension with encryption

I listed three Windows-based and five custom authentication techniques for Web services. Obviously, there are many more permutations and variations on this theme. Table 1 lists the authentication options I discussed, and the main points to consider when choosing an authentication mechanism:

  • Is the password sent in clear text and therefore requires HTTPS?
  • What are the platform requirements on both the client and the server side?
  • When does authentication take place, on the first call only, or on every call? What are the throughput implications of that?

Table 1: Comparing Windows-based and custom authentication techniques for Web services.

Authentication Method

Password Sent in Clear Text

Requires Windows

Authenticate on First Call Only

Basic Authentication

Yes

No

Yes

Digest Authentication

No

No

Yes

Integrated Authentication

No

Client/Server

Yes

Log-in method

Yes

No

Yes

SOAP header

Yes

No

No

SOAP header with cookie

Yes

No

Yes

SOAP extension

Yes

Client/Server

Depends

SOAP extension with encryption

No

Client/Server

Depends


For more information on implementation details, refer article: .NET Web Services and Security


  Asked in:  TCS (Tata Consultancy Services)   Expertise Level:  Experienced
  Last updated on Wednesday, 14 March 2012
5/5 stars (4 vote(s))

Register Login Ask Us Write to Us Help