Application Security Arena

What to do When IIS MMC doesn't do the work

for example- if you want to use WCF and windows integarted security you will need to conifgure the IIS for windows integrated authentication. even when you do that you can get an execption like: System.ServiceModel.ServiceHostingEnvironment+HostingManager/27836922 Read More...

WCF Security References

WCF security http://msdn2.microsoft.com/en-us/library/ms732362.aspx WCF with x509 http://msdn2.microsoft.com/en-us/library/ms733137.aspx Using client credentials http://www.theserverside.net/tt/articles/showarticle.tss?id=SecuringWCFService Delegation Read More...

The Silverlight Security Model

Since the v1.1 release of Silverlight includes a slimmed down version of the CLR, you might be wondering what the managed security story for Silverlight is and how it compares to CAS on the desktop version of the CLR. read more here: http://blogs.msdn.com/shawnfa/archive/2007/05/09/the-silverlight-security-model.asp Read More...