Security for Canadian Developers

8 Simple Rules For Developing More Secure Code

While surfing the Web, I came across the following article written by Michael Howard. The article really resonated for me because it covered the following points: Using analysis tools and experts to review your code (which can be accomplished with tools

ASP.NET AJAX Security Webcast

Be sure to check out our latest security webcast this Wednesday. Here is the abstract: ASP.NET AJAX is a powerful framework for creating interactive and highly-personalized Web experiences that work across all the most popular browsers. Like any other

IIS 6.0 and ASP.NET 2.0 Credentials--Part Two

The ASP.NET User Principal (HTTPContext.User) clearly depends upon the Authentication Mechanism that you selected in IIS 6.0 "Authenication Tab" and if you use Integrated Windows Authentication then it is dependant on the IIS impersonation token that

IIS 6.0 and ASP.NET 2.0 Credentials

The one area that many developers do not have good grasp at is how Authentication tokens from IIS 6.0 is passed to ASP.NET 2.0 and how these tokens can subsequently be used for Authorization in an ASP.NET 2.0 Web Application. The one question that arises