Web Service Question

[patnsnaudy]

Does anyone know of a simple example of securing a webservice client and server. I need to pass a username and password from the winform client to the web service, but I don't want them sent in plain text xml. Thanks

[Mazdak]

Search for SoapHeader and Cryptography[^] to see how encrypt/decrypt datas and passing them to web service. Mazy
"One who dives deep gets the pearls,the burning desire for realization brings the goal nearer." - Babuji

[Heath Stewart]

Or even easier, just setup an SSL certificate on your web server and communicate with your web service via the SSL port (default is 443). This encrypts everything for you. Instead of the SOAP headers (which doesn't encrypt anything), see the System.Security.Cryptography.Xml namespace in the .NET Framework SDK. I also cover the signing portion of this (to see an example of that part of it, which is similar to what you need to do for encrypting the SOAP message) in my article, Using XML Digital Signatures for Application Licensing[^]. The WS-Security specs (of which WS-Signatures and WS-Encryption is part) are also an industry standard.

Microsoft MVP, Visual C# My Articles

[patnsnaudy]

Thanks. Is WS-Security a standard yet?