Re: Allow an external web site to automatically login to an ASP.Net si

If it's a post to your form, then it is as encrypted as your existing
form, right? Why not just use SSL?

-----Original Message-----
From: Tim [mailto:Tim@xxxxxxxxxxxxxxxxxxxxxxxxx]
Posted At: Wednesday, November 28, 2007 10:15 AM
Posted To: microsoft.public.dotnet.framework.aspnet.security
Conversation: Allow an external web site to automatically login to an
ASP.Net si
Subject: Allow an external web site to automatically login to an ASP.Net
si

Hi

I have a requirement for an external web site to be able to automatically
log in to my ASP.Net web site that is managed using Forms Authentication

To do this I have created a simple HTML Form, that submits a userId and
password as a Form Post submission to my ASP.Net web site that can then
process it

The problem is the HTML Form passes the userId and password UNENCRYPTED
which is not secure

- The question is, how can I pass the userId and password in an ENCRYPTED
way to my ASP.Net application?

I am thinking of some sort of web service call to get a GUID, which will
then act as a temporary Id to my site, but I am not sure how the web
service
can receive authentication details that are encrypted?

Thanks in advance for advice on this matter








.

Relevant Pages

  • FormView InsertingItem - Checking before insert not working
    ... I have a formview called fv1. ... UserWebSiteTextBox.Text and do a lookup and return the Userid if thier ... Plese enter the web site you would like. ... Dim UserID As Integer ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: HELP! Windows authentication gives wrong user name
    ... public static string UserID() ... When someone accesses the web site, a logon dialog box shows up. ...
    (microsoft.public.dotnet.security)
  • Cannot delete user with Web Site Administration Tool
    ... When using the Web Site Administration Tool, I get the following error when ... DELETE FROM dbo.aspnet_Membership WHERE @UserId = UserId ... Because this does not execute, the following subsequent SQL fails with the ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Changed UserId and 50 Hours Later Swen is Back
    ... a web site gets infected by Swen, then it doesn't also somehow attach itself to ... Suppose my addresses are abc and def. ... When I want to post, I dial up def, and fire up my def profile. ... I'm using my old userid. ...
    (microsoft.public.security.virus)
  • Re: (A) record for domain.lan picking up domain.com email
    ... address so that lan clients can access the external web site. ... > I understand I need to create amongst other things an record in DNS. ... > the domain.lan namespace an not the domain.com namespace. ...
    (microsoft.public.windows.server.setup)