Re: Best Practices for Secure Communications

From: Pieter Philippaerts (pieter@no_spam.mentalis.org)
Date: 02/20/03

  • Next message: 台灣微軟系統支援部: "RE: Securi9ng Subfolder with Forms Authentication" 
    From: "Pieter Philippaerts" <pieter@no_spam.mentalis.org>
Date: Thu, 20 Feb 2003 02:02:34 +0100

    "Tim Overbay" <luhar@luharsoftworks.com> wrote in message
    news:eZim98G2CHA.1752@TK2MSFTNGP10...
    > Is there a definitive "best practices" example of exchanging text messages
    > between a client and host? I'm looking for something along these lines:
    <SNIP>
    > Any help locating some sample code would be appreciated.

    The SSL and TLS protocols are doing exactly that: they authenticate the
    client and server, and they transparently encrypt and decrypt messages sent
    between the two.
    Unfortunately, the .NET runtime only supports SSL and TLS for HTTP
    connections; if you wish to use different protocols, you can either buy a
    commercial SSL/TLS package, or you can download a free implementation such
    as ours: http://www.mentalis.org/soft/projects/seclib/

    Regards,
    Pieter Philippaerts
    http://www.mentalis.org/

    Relevant Pages

    • Re: Best Practices for Secure Communications
      ... I think maybe I worded my question incorrectly, but your suggestion is ... > The SSL and TLS protocols are doing exactly that: ... > client and server, and they transparently encrypt and decrypt messages ... the .NET runtime only supports SSL and TLS for HTTP ...
      (microsoft.public.dotnet.security)
    • SSL and IPS (was RE: ssh and ids)
      ... How many simultaneous SSL sessions can be tracked?" ... I assume you're talking about a case in which the client constantly ... If you walk the possible session id space and ... The server chooses the session ID, ...
      (Focus-IDS)
    • Re: IIS6.0 + SSL Breaks down!
      ... Ok, I asked the IIS SSL developer, and he gave me the details. ... bad public specification on SSL make SSL Client Certificates ...
      (microsoft.public.inetserver.iis)
    • Re: Various DOM-related wrappers (Code Worth Recommending Project)
      ... much client side scripting is used as it is testing a client side ... Lower level functionality that is required by the higher level ...
      (comp.lang.javascript)
    • Re: Can SSL sessions be compromised?
      ... etc) attachments using webmail during these SSL sessions. ... who the client thinks the server is ... ... part of this has to do with the fundamental digital certificate and PKI ...
      (comp.security.misc)