Two pass encryption within a Web Service and Web App

Question

Hey all,

I'm looking for some guidance for developing a Web Service with a two stage encryption. Meaning a customer passes a key and data along with their cred. to my Web Service. The data will be encrypted with the key that is static to the Web Service and Web App. This may seem a bit over kill, but for the information that I am passing back to the customer, I want to make sure the customer is who they say they are and I am supplying the correct information. 

Thanks in advance!

Answer 1

If you are developing a new service, then you should use WCF. ASMX is a legacy technology that should not be used for new development.

---

John Saunders
WCF is Web Services. They are not two separate things.
Use WCF for All New Web Service Development, instead of legacy ASMX or obsolete WSE
Use File->New Project to create Web Service Projects

Answer 2

John Saunders,

Thanks for the information and I would agree with you.

Due to the type of environment I am working in and type of customers I will be dealing with for this enhancement, I am limited to using older technology. The Web App within the solution (and will also be sharing references/classes with) is in a 3.5 Framework and won't be moving to 4.0/4.5 any time soon (yet again, not my choice).

Answer 3

WCF is in .NET 3.0 and above. The need to use "older technology" doesn't mean you can't use WCF.

Keep in mind that one of the most important differences between ASMX and WCF is that WCF was meant to be extensible. Even if the feature you want is not present out of the box, you will be able to implement it yourself much more easily than in ASMX.

---

John Saunders
WCF is Web Services. They are not two separate things.
Use WCF for All New Web Service Development, instead of legacy ASMX or obsolete WSE
Use File->New Project to create Web Service Projects