Archived Months
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007


all groups > dotnet security > august 2007

Filter by week: 1 2 3 4 5

Backing up and restoring encryption key
Posted by Matt P at 8/30/2007 5:34:02 AM
I am using User Level DPAPI encryption in a C# .net 2.0 Application. If i need to move the application to another machine how can i move the encryption key over. The encrypted data is stored in a database on another machine. I was under the impression that as long as i use the same usernam...more >>

Secure Credential's pwd handling
Posted by Paolo Pagano at 8/29/2007 3:08:54 PM
Hi, I need to provide my own network credentials to a web request (in a Windows Forms Application): HttpWebRequest req = ... req.Credentials = new NetworkCredential( userName, PWD, userDomain ); how to manage PWD from 'input by user' to 'NetworkCredential' in a security safe ma...more >>

Documents with customisation attached to emails fail to open with customisation.
Posted by Sharat Koya at 8/29/2007 7:58:59 AM
Hi, when sending a document with VSTO customisation via email the recipient recieves the document but they cannot open it directly from the outlook email by double clicking. The document opens but the customisation fails and they get the following error message: System.IO.FileLoadExceptio...more >>

Client Cert Delegation to Web Service
Posted by hepsubah at 8/29/2007 6:34:00 AM
I have some secure ASP.NET Web Services (which could become WCF services) used to generate a secure ASP.NET page. Is there any way to delegate (impersonate?) the client cert from the user accessing the page to the secure service ? Thanks in advance Doug ...more >>

Login to a different domain from ASP.NET application
Posted by Juan Manuel Porras Gálvez at 8/29/2007 5:52:20 AM
Hello all, I've got a problem with the authentication of my ASP.NET application. The question is how to authenticate in a NT domain from my ASP.NET application placed on a different domain which is trusted (trusting) to it. The trusted relationship are in both sides (from NT domain to Activ...more >>

Capturing a Client Cert and Passing it to a Secure Web Service
Posted by hepsubah at 8/28/2007 1:38:38 PM
I'm trying to capture a client cert in my ASP.NET application, and use that cert as the client cert for a call to secure web service. I've used the following code, but am getting a 403 error on the invocation of the service. All the service is supposed to do is return the subject of the passe...more >>

How to convert a SecureString into an encrypted String in a secure manner?
Posted by spam NO[at]SPAM brandt-lassen.dk at 8/28/2007 3:35:57 AM
I'm designing a system for Windows initiated Single Sign-On against RACF. I keep my RACF-passwords in fields of the new .net 2.0 type System.Security.SecureString. I need to store these passwords in a SQL server 2005 database between user sessions. Hence, I need to convert the SecureString in...more >>

How to convert a SecureString into an encrypted String in a secure manner?
Posted by spam NO[at]SPAM brandt-lassen.dk at 8/28/2007 3:28:32 AM
<p><span>I'm designing a system for Windows initiated Single Sign-On against RACF. </span></p> <p><span>I keep my RACF-passwords in fields of the new .net 2.0 type System.Security.SecureString. I need to store these passwords in a SQL server 2005 database between user sessions. Hence, I need ...more >>



I want to read a .pfx and use the private key to sign a document, is that "that" bad?
Posted by hubble at 8/27/2007 3:39:24 PM
I am trying to sign an xml document with a private key, reading the key from a .pfx file. The code following. string xml; xml = Request.MapPath("/rsacert.pfx"); xml = HttpUtility.HtmlDecode(xml); Trace.Write(xml); Response.Write("<p/>"); X509Certificate2 cert = n...more >>

Role based security
Posted by Erick at 8/26/2007 5:24:26 PM
Can some one help me. I'm trying to build framework in .net which uses role based security. I want to be able to defined the roles in the web config e.g Manager, PowerUser, Guest, AnonUser I want to be able to map NT application groups to those roles in the web config so that in my code I c...more >>

Makecert certificate generation headache
Posted by tsa NO[at]SPAM scandpowerit.no at 8/23/2007 12:49:24 AM
Hi, all! I'm currently working on a .NET development project in which I'm trying to figure out how to utilize makecert.exe, in order to issue a pair of X.509 certificates for testing out the authentication scheme of the solution. So far, however, I've not succeeded in providing the makecert u...more >>

Manually computing sha1 digest of reference containing base64 encoded string and comparing it to digest value of same reference generated by SignedXML
Posted by sachinvyas NO[at]SPAM gmail.com at 8/21/2007 7:37:00 PM
I have an XML which I am trying to sign and provide it to one of my users. The XML has two nodes one which has public part which is not encrypted and other which is private data. The data in private node has data encrypted using users public key for transfering confidential information ( base...more >>

System.Security.Cryptography.ProtectedData
Posted by Abhinav at 8/17/2007 9:51:14 AM
I was attempting to use this class however I do not see the = ProtectedData class under System.Security.Cryptography. Any reason why! This is what I have so far ... Imports System.Security.Cryptography Imports System.text.Encoding Imports System Public Class Security Private S...more >>

Changing Visibility of Class/Class members in different assemblies
Posted by Amb k at 8/16/2007 5:52:42 PM
I have created an assembly, which contains two class (Cls1,cls2), in which Cls1 contains 3 properties Prop1, Prop2,Prop3 and Cls2 contains some other properties. Now i am using this assembly (Add reference) in some other assemblies Assb1 and Assb2. In Assb1 i do not want Cls2 to be visibl...more >>

web.config file
Posted by Andy at 8/14/2007 10:32:01 AM
Can anyone point me towards or share web.config settings to ensure security? There are many defaults settings that may need to change to secure the apps. I am not sure on all the setting, if someone can share the settings specialy the most vulnerable that need to change that will be great. ...more >>

Impersonation - connecting to a machine in it's own workgroup
Posted by glennanthonyb at 8/2/2007 12:00:00 AM
Hi I'm trying to check the status of a service running on a machine in its own workgroup. Is there anyway of impersonating a user in the workgroup to allow the ServiceController to connect and retrieve the state of the service? The process performing the check sits in a domain and is ru...more >>


DevelopmentNow Blog