Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Web Services / September 2004

Tip: Looking for answers? Try searching our database.

Encrypted response

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Random - 13 Sep 2004 21:23 GMT
What would be teh proper way to encrypt a SOAP response from a Web Service
without using x.509 or Kerberos?  I know I could do it using straight
symmetric encryption algorithms like DES, but I'd rather use something more
secure.

I am encrypting the request to the Web Service using a UsernameToken.  I'm
thinking that a move to writing and using a custom binary token service.
Would this be usable to encrypt the response as well as the issued request?
What about a SecurityContextToken?
Dilip Krishnan - 15 Sep 2004 03:39 GMT
The 'proper' way is to use a x509 or a kerberos token it can be difficult to
manage and distribute certificates though. Custom binary tokens are not too
different from a straight symetric encryption. You have to share some
information to encrypt and decrypt.

> What would be teh proper way to encrypt a SOAP response from a Web Service
> without using x.509 or Kerberos?  I know I could do it using straight
[quoted text clipped - 5 lines]
> Would this be usable to encrypt the response as well as the issued request?
> What about a SecurityContextToken?

SecurityContextToken is generally used with a secure conversation

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.