September 2004
Intermediate to advanced
408 pages
7h 25m
English
Content preview from The .NET Developer's Guide to Windows Security
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Chapter 65. What Is SSPI?
SSPI stands for the Security Support Provider Interface, which helps a client and server establish and maintain a secure channel, providing confidentiality, integrity, and authentication (Item 58). It abstracts most of the details of performing an authentication handshake and provides methods for integrity-protecting and encrypting data being sent on the wire as well as for decrypting and validating that data on the other side. Providers, such as Kerberos, NTLM, and Negotiate, sit underneath this abstract interface. Figure 65.1 shows the basic architecture.
Figure 65.1. The Security Support Provider Interface
Whereas SSPI ...