Web Service Security

[Guvera]

Dear friend,

I am using Asp.Net 2.0. In my project we need to use web services security. I

am really confusing in this concept. I dont know that how to implement coding

in my application. I know that authentication,authorization,integrity and

confidentiality for this ws security. My questions are these that

1. How to implement ws security in Asp.Net 2.0 application.
2. If use wsdl , how could implement also and Is any need to register something for ws security in the application.

Please clear my doubts.

Hope soon ur's reply.

Thanks & Regards

[mendhak]

There are lots of ways... you could force the client to pass credentials and those credentials could be windows or basic or custom. You could, otherwise, force the client to use tokens which it passes every time it needs to call a method.

It really depends on what sort of security you want. You could also get the client to use SSL. Or a certificate.

Have you read the MSDN article on it?
http://msdn.microsoft.com/en-us/library/ms996415.aspx


It even addresses 'crazy developers'