web service security

Question

Hi every one,

I want to create an webservice for access data from remote.

How do i hide the request information if the client using SOAP?

example, in my webservice have method:

[webmethod...]

public DataTable  RequestListOrder(String userID, String passWord)

{
}

The client will send the xml request with the field userID and passWord. But it easy stolen

How do i secure my info?

thanks

Answer 1

You should not be using ASMX web services at all. You should be using WCF, which permits you to use the WS-Security protocols to encrypt and/or sign your web service messages.

If you must use ASMX, then you should  use an HTTPS connection.

---

John Saunders
WCF is Web Services. They are not two separate things.
Use WCF for All New Web Service Development, instead of legacy ASMX or obsolete WSE
Use File->New Project to create Web Service Projects

Answer 2

Hi, I am sharing one document of about Web Services Security Implementation http://www.omg.org/news/meetings/workshops/DOCsec-2003/00-6_Tutorial2_Thelin.pdf