b*u
2 楼
google secure token webservice.
D*n
3 楼
http://msdn2.microsoft.com/en-us/library/aa480581.aspx
I haven't tried it yet, and I don't know how good its performance is.
【在 x*g 的大作中提到】
: what's the current best practice
: for secure a webservice?
I haven't tried it yet, and I don't know how good its performance is.
【在 x*g 的大作中提到】
: what's the current best practice
: for secure a webservice?
b*u
4 楼
using X509 certificates on both sides had the worst performance. according
to my research 1 year ago on wse2.0. besides that, you will have to worry
about expiration of both keys. usually key expires once a year, so it may
quickly become an administrative burden.
depends on your scenario, an alternative is to use x509 certificate only on
the server side, the client uses a pair of user name password to
authenticate itself.
to my research 1 year ago on wse2.0. besides that, you will have to worry
about expiration of both keys. usually key expires once a year, so it may
quickly become an administrative burden.
depends on your scenario, an alternative is to use x509 certificate only on
the server side, the client uses a pair of user name password to
authenticate itself.
相关阅读
Office 2007 Office Open XML Format New LineIT openningsASP.NET和PHPWe're hiring: IT architectThe day finally comes请指点How to use a shared project in both VS2010 and VS2008?谁来解释一下Unity framwork里面interception是做啥用的为啥Razor view ping pong里没有javascript.net web pge performance在子目录下建另一个网站What is HTML5.net developer再问大家，关于.netHelp ---- Interview：Solutions Developer at Avanavb.net problem一个网站和app的project (转载)请教：C# or .Net Developer interview 会不会涉及算法和数据结构方面的问题？有比 silverlight wcf async pattern 更莫名其妙的吗？如何积累.net开发的工作经验 (转载)