Secure Client-Server

From: Chris Botha (chris_s_botha_at_hotmail.com)
Date: 10/04/03

  • Next message: Pieter Philippaerts: "Re: Secure Client-Server" 
    Date: Fri, 3 Oct 2003 22:47:54 -0400

    I got a strange request from a client today, or maybe it is not so strange.
    If I write a WEB Service and also an application called ABC to talk to the
    WEB Service, is there a way that the server can know that it is application
    ABC that is talking, and will allow nothing else? Thus if someone hits the
    WEB Service using the browser or any other application, the server should
    deny the request. I've stumbled around looking at application signing, etc,
    but can not come up with a concrete answer. This means that if there is a
    certificate/signature/key-pair/whatever involved, it should live inside the
    client app ABC only, and not be readily available in the computer itself, I
    guess.

    Thanks.

  • Next message: Pieter Philippaerts: "Re: Secure Client-Server"

    Relevant Pages

    • Re: Implementing a common SOAP Header across multiple Web Service Pages
      ... to set a client up to reference multiple Web ... the Web Service site would ... Your point about leaving the ASMX page as lean as possible and acting just ...
      (microsoft.public.dotnet.framework.webservices)
    • Re: Implementing a common SOAP Header across multiple Web Service Pages
      ... between my Web Service application and the client. ... public string SID; ... Web Service page, rather than to a dozen or so separate Web Service pages ... You can easily create a .ASMX file ...
      (microsoft.public.dotnet.framework.webservices)
    • Re: Still Need desperate help to start with ASP NET - simplified problems - HELP!!
      ... You could do it as a web service. ... The handler can draw on the webservice for information and db lookup. ... IE posts data AJAX to handler on web server ... featured application (say thick client) which does a lot of complicate ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: WSE 3.0, SoapReceiver and Kerberos encryption
      ... I have a machine we'll call 'Service' which exposes a web service called ... I have defined a WSE 3.0 policy that sets up Kerberos Security. ... I have a machine we'll call 'Client'. ... format when the "target Web service is created using a SoapReceiver ...
      (microsoft.public.dotnet.framework.webservices.enhancements)
    • Re: UsernameOverTransportSecurity+SSL Confusion, please help
      ... But when I go to my web service: ... I have under IIS settings for my WebService? ... I will have a private key on the server, and I will give the private key to ... The client will automatically get the public key and negotiate a key to ...
      (microsoft.public.dotnet.framework.webservices.enhancements)