Archive for the ‘Security’ Category
In my previous article, I showed how you could embed a certificate as a managed resource in your application. Today, I will demonstrate how you can implement your own custom certificate validation for WCF. There are many scenarios where you would want to implement your own certificate validation mechanics. For instance, it might not be [...]
In my previous article, I showed how to implement custom username and password validation for WCF and how to use a certificate to encrypt the communication (including the username and password). In this article, I will extend that sample and embed the certificate as a resource in the service library as well as create a [...]
One of the many common security scenarios when programming WCF, is using custom username and password authentication. The custom authentication part is no big hassle in itself, but as a security precaution, WCF refuses to send usernames and passwords in clear-text, instead requiring that the communication be encrypted in some way. Attempting to use custom [...]
The first thing we need to do is understand certificates and how they work, not just in theory, but in practice. Then we’ll proceed to create our own root certificate authority. In Part II, we’ll secure a WCF service using a certificate. An introduction to digital certificates The idea of certificates is that someone we [...]
