Browse by Tags

• CardSpace
• CAS
• Deployment Phase
• Development Phase
• IIS 7
• Performance
• Planning Phase
• Practices
• Security
• Test Phase
• Vista

Web Services Over SSL - Is It Really That Slow Like They Say?

My answer is "no" . I am working on solution where there is no Windows Active Directory Domain so we cannot utilize our beloved Kerberos and Windows Integrated Authentication saving big on configuration and management while taking advantage of increased Read More...

Posted 01 August 07 03:35 by alikl | 2 Comments   
Filed under Security, Development Phase, Implementation, Deployment Phase, Performance, Authentication, Planning Phase

T-Shooting Kerberos

I was delivering "Authentication Explained" session for Security User Group. First off - thanks for attending the session! The session was based on "Authentication Explained" workshop . During the session I was demoing the following topics: Identity Flow Read More...

Posted 04 July 07 10:16 by alikl | 2 Comments   
Filed under Test Phase, Security, Implementation, Deployment Phase, Practices, Authentication

SOA, Strong Authentication, Standard Authorization - Cool Solution

reposted from here I've previously blogged about SOA Security Inside Enterprise walls This time I had couple of pretty interesting requirements from one customer that targeted B2B/Partners scenario. They had a web site that communicates to partner's web Read More...

Posted 30 May 07 01:45 by alikl | 7 Comments   
Filed under Security, Development Phase, Implementation, Authentication

Adding Shared SNK File In Visual Studio 2005

“Prior to Microsoft Visual C# 2005, you specified the key file using CLR attributes in source code. These attributes are now deprecated . Beginning in Microsoft Visual C# 2005, you should use the Signing Page of the Project Designer or the Assembly Linker Read More...

Posted 16 April 07 03:24 by alikl | 1 Comments   
Filed under Security, Development Phase, CAS, Implementation, Authentication

Authentication Hub

Windows Authentication Identity Flow Through Physical Tiers Identity Flow Through Physical Tiers - Impersonation Identity Flow Through Physical Tiers - Delegation Identity Flow Through Physical Tiers - Protocol Transition Certificates Different Ways To Read More...

Posted 11 April 07 09:04 by alikl | 8 Comments   
Filed under Security, Implementation, Authentication

Identity Flow Through Physical Tiers - Protocol Transition

If these articles: How To: Use Protocol Transition and Constrained Delegation in ASP.NET 2.0 Using Protocol Transition—Tips from the Trenches are your friends then do not waste your time on this post, please. The scenario is the same where user sits behind Read More...

Posted 10 April 07 01:27 by alikl | 3 Comments   
Filed under Security, Development Phase, Implementation, Authentication

Basic Steps To Make ASP.NET Web Site CardSpace Aware

From short investigation and a lot of information from Richard Turner's screencasts Here is what I get. To make my ASP.NET app I need: Write ASP.NET server side code to validate the token that holds end user's data, further processing might include checking Read More...

Posted 09 April 07 01:26 by alikl | 1 Comments   
Filed under Security, Implementation, Authentication, Vista, IIS 7, CardSpace

Identity Flow Through Physical Tiers - Delegation

If these articles: How To: Implement Kerberos Delegation for Windows 2000 How To: Use Impersonation and Delegation in ASP.NET 2.0 Credentials and Delegation are your friends then do not waste your time on this post, please. I have still the same scenario Read More...

Posted 08 April 07 05:53 by alikl | 3 Comments   
Filed under Security, Development Phase, Implementation, Authentication

Identity Flow Through Physical Tiers - Impersonation

There are scenarios where actual windows identity of end user needs to be flowed to the server so that server can perform action on end user's behalf - that is in nutshell Impersonation. In previous post Identity Flow Through Physical Tiers - one might Read More...

Posted 06 April 07 07:54 by alikl | 7 Comments   
Filed under Security, Development Phase, Implementation, Authentication

Identity Flow Through Physical Tiers

Identity story with .Net really rocks, but along with great extensibility it also brings a lots of confusion ( One Identity - Many Faces :IIdentity ). I am building now workshop for developers that concentrates on authentication only. It talks about concepts, Read More...

Posted 05 April 07 10:23 by alikl | 4 Comments   
Filed under Security, Development Phase, Implementation, Authentication

Different Ways To Get Hold On Certificates - Net FX 1.1, 2.0

Net FX 1.1: First, one need to export certificate to file (no private keys exported), from http://msdn2.microsoft.com/en-us/library/aa302408.aspx // TODO: Replace with a valid path to your certificate string certPath = @"C:\WSClientCert.cer" // create Read More...

Posted 30 March 07 09:41 by alikl | 1 Comments   
Filed under Security, Development Phase, Implementation, Authentication

Search

This Blog

• Home
• Email