web service security that is interoperable

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Secret Squirrel - 19 Jan 2006 21:25 GMT

Hi,

What is the most secure option for web service security that is also
easily interoperable between .NET and java, or other technologies?
Suppose you are developing a .NET WS, and plan to have many callers
using many different technologies, which mechanism would you choose for
authentication and authorization?

Thanks,

Jon Paugh

Reply to this Message

Dominick Baier [DevelopMentor] - 19 Jan 2006 21:47 GMT

Hi,

SSL and client certificates! this depends of course on your scenario - but
definitely the most secure+interoperable solution.

go only for ws-security if you need support for intermediaries and custom
authentication schemes.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> Hi,
>
[quoted text clipped - 7 lines]
>
> Jon Paugh

Reply to this Message

Secret Squirrel - 20 Jan 2006 21:07 GMT

Thanks. I guess that handles authorization and encryption.

Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...