c# - Secure connection using SOAP -
i need call .net soap webservice in secure way. must secure in such way others can't call webservice methods, , should not possible "the middle man" understand content of messages.
the caller .net webapplication installed on iis. can design webservice methods want, no restrictions there.
i have been researching https/ssl certificates, don't know if solves problems in way? example, anoying if certificates has expiration date, although it's not showstopper in way.
so how go in way..?
thanks help.
as @brokenglass said, ssl encrypts traffic between points. doesn't handle securing individual functions usage without authorization. here article on such topic using soap headers:
how to: perform custom authentication using soap headers
this can mixed form of authentication except windows integrated. use windows authentication, you'll need have separate library accesses active directory through directoryservices namespace.
Comments
Post a Comment