c# - Secure connection using SOAP -


i need call .net soap webservice in secure way. must secure in such way others can't call webservice methods, , should not possible "the middle man" understand content of messages.

the caller .net webapplication installed on iis. can design webservice methods want, no restrictions there.

i have been researching https/ssl certificates, don't know if solves problems in way? example, anoying if certificates has expiration date, although it's not showstopper in way.

so how go in way..?

thanks help.

as @brokenglass said, ssl encrypts traffic between points. doesn't handle securing individual functions usage without authorization. here article on such topic using soap headers:

how to: perform custom authentication using soap headers

this can mixed form of authentication except windows integrated. use windows authentication, you'll need have separate library accesses active directory through directoryservices namespace.


Comments

Popular posts from this blog

ASP.NET/SQL find the element ID and update database -

jquery - appear modal windows bottom -

c++ - Compiling static TagLib 1.6.3 libraries for Windows -