asp.net - .net webservice needs to authenticate Android client -


i have android app talks .net 2 webservice (iis7) using http , managed make run on https using self-signed server certificate (but not requiring client certificate). see http traffic encrypted , looks secure.
options have on how authenticate client? example, block webservice access internet explorer on pc.

client-authenticated tls handshake described here way go? how can accomplish that? advice or example appreciated.

well, given each user should authenticate anyhow, want setup sort of per-user authentication strategy variety of reasons. first, given might distributed app, having single "gold master" authentication certificate or credentials fail hack -- either grabbing cert or grabbing account. , do? second, not particularly hard handle. can use asp.net membership it, , take credentials number of ways depending on nature of service. third, alot easier manage client certificates.


Comments

Popular posts from this blog

php - What is the difference between $_SERVER['PATH_INFO'] and $_SERVER['ORIG_PATH_INFO']? -

fortran - Function return type mismatch -

queue - mq_receive: message too long -