Hi,

What is the most secure option for web service security that is also
easily interoperable between .NET and java, or other technologies?
Suppose you are developing a .NET WS, and plan to have many callers
using many different technologies, which mechanism would you choose for
authentication and authorization?

Thanks,

Jon Paugh

Hi,

SSL and client certificates! this depends of course on your scenario - but
definitely the most secure+interoperable solution.

go only for ws-security if you need support for intermediaries and custom
authentication schemes.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Show quoteHide quote

Thanks. I guess that handles authorization and encryption.

Client/Server application with single login-SecureStream?
Securing a .NET webapp with ActiveDir and SQL-server?
Application Security and Trust
How can I access more properties of the AD Acount
encrypting app.config with RSA
Mail merge with an MD5 hash.
Kerberos S4U problem
SHA1Managed class has different results in 2.0 vs. 1.1??
Directory access check
LogParser - Error