Securing Web Services

There are likely several ways to secure a Web Service. One involves general security of IIS. Another involves user access to the Web Service through authentication. I’ll discuss the latter here. General security will be discussed in Chapter 31, “Securing ASP.NET Applications.”

The typical way one might secure a resource is through a username/password combination. In database applications, for instance, you might store an encrypted form of the user’s password in the database. When the user attempts to log in to the application, the application requests the friendly name of the password, encrypts it, and compares it with what resides in the database. This approach is more secure using a one-way hashing algorithm such as MD5-hashing. ...

Get Delphi for .NET Developer’s Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.