asp.net - .net webservice needs to authenticate Android client -


i have android app talks .net 2 webservice (iis7) using http , managed make run on https using self-signed server certificate (but not requiring client certificate). see http traffic encrypted , looks secure.
options have on how authenticate client? example, block webservice access internet explorer on pc.

client-authenticated tls handshake described here way go? how can accomplish that? advice or example appreciated.

well, given each user should authenticate anyhow, want setup sort of per-user authentication strategy variety of reasons. first, given might distributed app, having single "gold master" authentication certificate or credentials fail hack -- either grabbing cert or grabbing account. , do? second, not particularly hard handle. can use asp.net membership it, , take credentials number of ways depending on nature of service. third, alot easier manage client certificates.


Comments

Popular posts from this blog

how to build hyperlink for query string in php -

php - What is the difference between $_SERVER['PATH_INFO'] and $_SERVER['ORIG_PATH_INFO']? -

queue - mq_receive: message too long -