Browse by Tags

• Authentication
• Deployment Inspection
• Development Phase
• IIS 7
• Implementation
• Performance
• Security

Securing IIS7 - Windows Server 2008 Security Guide

Windows Server 2008 Security Guide is out. It covers many crucial aspects but my favorite of course is IIS7 chapter: Chapter 6: Hardening Web Services This chapter provides prescriptive guidance for hardening the Web Server role. The chapter discusses Read More...

Posted 28 February 08 07:09 by alikl | 1 Comments   
Filed under Security, Deployment Phase, Deployment Inspection, IIS 7, Planning Phase

Composite Application Block (CAB) Programming Essentials - Crucial For CAB Performance

Rich Newman posted awesome guides for Composite Application Block (CAB) programming: Table of Contents: Introduction to CAB/SCSF Part 1 Modules and Shells Part 2 WorkItems Part 3 Introduction to Dependency Injection Part 4 An Aside on Inversion of Control, Read More...

Posted 29 October 07 09:30 by alikl | 1 Comments   
Filed under Deployment Phase, Performance, Planning Phase

Authentication And Identity Flow When ASP Page Consumes ASP.NET Web Service

"Classic" ASP has application isolation that is different from ASP.NET. Here is one of the real world scenarios where it might matter. There is a legacy web application written in ASP and hosted on Win2K3 box (IIS 6.0). It is of course in the process Read More...

Posted 05 September 07 05:04 by alikl | 4 Comments   
Filed under Security, Deployment Phase, Authentication, Planning Phase

Web Services Over SSL - Is It Really That Slow Like They Say?

My answer is "no" . I am working on solution where there is no Windows Active Directory Domain so we cannot utilize our beloved Kerberos and Windows Integrated Authentication saving big on configuration and management while taking advantage of increased Read More...

Posted 01 August 07 03:35 by alikl | 2 Comments   
Filed under Security, Development Phase, Implementation, Deployment Phase, Performance, Authentication, Planning Phase

Man-In-The-Middle-Attack: Protecting Http Traffic With SSL Might Be Not Enough - Consider Protecting SQL Traffic Too

Think configuring SSL for your web site is enough to protect against prying eyes? Here is how the sensitive data can be exposed by sniffing your SQL traffic. Consider common simple 3 tier web architecture for data driven web site. The Web and DB server Read More...

Posted 30 July 07 03:06 by alikl | 1 Comments   
Filed under Security, Implementation, Deployment Phase, Planning Phase

Search

This Blog

• Home
• Email