views:

56

answers:

1

How do I prompt for username and password in my C#/SQL web application? This was developed in VS 2008 on a 32-bit XP. The current connection string I'm using in my web.config file is:

<add name="AdventureWorksConnectionString2" connectionString="Data Source=SIDEKICK;Initial Catalog=AdventureWorks;Persist Security Info=false; " 
        providerName="System.Data.SqlClient" />

When I select Basic Authentication it pops up the warning: "The authentication option you have chosen results in passwords being sent over the network without data encryption..." How do I choose this authentication method and still send passwords over securely?

So essentially I am looking for the most secure authentication method but that still requires users to input password?

+1  A: 

Take a look at these links.

cottsak