.NET web services security

Question

How can .NET web services be made more secure? Something like HTTPS?

Answer 1

Take a look on this question.

Answer 2

Again - check out WCF. It has a very rich, flexible and extensive security model, both on the transport security (https) side as well as message-based security.

See the

• Fundamentals of WCF Security
• WCF Security Guidance

for an intro (fundamentals) and an overview (guidance) of all things possible.

Answer 3

If you don't have alternative of going with WCF service, the you can make use of GUIDs while calling web service. So you may define some white listed GUID which you will pass as a parameter while calling web service and you can check validity of each call to web service.

Answer 4

WCF is definitely the way to go in terms of creating .NET web services these days. For a good way of protecting WCF web services, check out incorporating the [UsernamePasswordValidator], which when combined with HTTPS endpoints provides a very good protection mechansim. The following link gives an example of it's usage:

http://msdn.microsoft.com/en-us/library/aa702565.aspx