Re: SSL vs Windows Integrated Security

Hi Louis,

Actually my understanding is that SSL and integrated auth work on different
layers and there is no direct relation or conflict between them. SSL offers
data encryption of HTTP transmission. Windows integrated authentication is
an authentication type which is considered more secure than other methods
like Basic auth. However it may not be so flexible like form based
authentication that is widely used by most of Internet sites.

In case what you are working on is a public web site on the Internet, my
recommandation is SSL + Form based authentcaiton. If it's an Intranet site,
SSL + Integrated auth might be better.

Furthermore Kerberos is one of the protocols used by integrated auth,
another one is NTLM.

Let us know if you have any further question on this.

Have a great weekend.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@xxxxxxxxxxxxxx

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.

MSDN Managed Newsgroup support offering is for non-urgent issues where an
initial response from the community or a Microsoft Support Engineer within
2 business day is acceptable. Please note that each follow up response may
take approximately 2 business days as the support professional working with
you may need further investigation to reach the most efficient resolution.
The offering is not appropriate for situations that require urgent,
real-time or phone-based interactions. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subscriptions/aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • RE: SoapException - NullReferenceException
    ... As for webservice over SSL, there does exists some common issue such as the ... client certificate supplyment(if you've configured it to require client ... Microsoft MSDN Online Support Lead ... I have a web service running on an SSL connection and unfortunately I ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • RE: OWA SSL Redirect Problem
    ... please disable the SSL authentication on the ... Microsoft Online Partner Support ... Business-Critical Phone Support (BCPS) provides you with technical phone ... If you are outside the United States, ...
    (microsoft.public.exchange2000.admin)
  • Re: Python does not play well with others
    ... for SSL in the socket module offers a coherent experience because it ... means that urllib and related modules can offer to support SSL-related ... because the built-in socket module SSL interface ... people started asking him mistakenly why he thought that Python was ...
    (comp.lang.python)
  • Re: Root Certificate
    ... their support about the same time as we did ours, ... most of these SSL issues are reproducable in Windows ... WinIE 6 and get a similar error when the cert only supports "domain.com". ...
    (microsoft.public.mac.office.entourage)
  • Re: To further understand OWA, authentication & default domain
    ... Integrated Auth is not as good a way to go anyway since a bunch of browsers ... NEVER use it without SSL. ... > For a customer of mine where I don't have the luxury of doing tests on ... > inclined to enable SSL for some reason. ...
    (microsoft.public.exchange.admin)
Loading