inline
Telmo Sampaio
tsampaio@gmail.com
> I have a web service that need to be authenticated
> to allow users to connect.
[quoted text clipped - 18 lines]
>
> a) What do experienced people think of this solution.
Instead of IsAuthenticated I would simply pass the Default Credetials. This
way, if you have a non-authenticated user the Guest (IUSR_CN or whatever is
setup in IIS). This is more secure since it will not send your users'
password over the wire.
> b) I need to do Unit Test for this, can I simulate a not logged user ???
Yeah, use a computer or virtual computer not logged on the the domain and
access you web app.
> c) How should I make the password secure ??
Check (a) or use SSL.
Telmo Sampaio
tsampaio@gmail.com