asp.net - .net webservice needs to authenticate Android client -
i have android app talks .net 2 webservice (iis7) using http , managed make run on https using self-signed server certificate (but not requiring client certificate). see http traffic encrypted , looks secure.
options have on how authenticate client? example, block webservice access internet explorer on pc.
client-authenticated tls handshake described here way go? how can accomplish that? advice or example appreciated.
well, given each user should authenticate anyhow, want setup sort of per-user authentication strategy variety of reasons. first, given might distributed app, having single "gold master" authentication certificate or credentials fail hack -- either grabbing cert or grabbing account. , do? second, not particularly hard handle. can use asp.net membership it, , take credentials number of ways depending on nature of service. third, alot easier manage client certificates.
Comments
Post a Comment