Protection For Web Service - Is Https Enough? [closed] - c#

Closed. This question needs details or clarity. It is not currently accepting answers.
Want to improve this question? Add details and clarify the problem by editing this post.
Closed 6 years ago.
Improve this question
I want to create a distributed application and I want to be using Web services so that I could consent with the other systems because there will be a version running on mobile and other computer and other smart hours.
But what worries me is being able to protect the application because it would be a lot of data and there will be great to adopt it.
Is HTTPS protocol enough to protect data during transmission and enough inability to eavesdrop on?
my English is poor i use google translate and not very good in that but is the better>
thx

HTTPS should suffice if the whole question circles around the transmission of data between the server and the client. If the data is EXTREMELY sensitive, implement some kind of encryption for the data itself, but in most cases, yes SSL/TLS will do the trick. I would be more worried about getting a proper authentication solution in Place to protect access in the first place.

Related

End To End Encrypted Chat Application using Windows Forms and . Net C#. Where do I start with encryption? [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed last year.
Improve this question
I have an assignment at school to create a chat application. I have created this using SignalR to ensure real time communication. However, our teacher wanted also end to end encryption.
I have 2 projects: 1 server (which contains the hub) and the Client, which communicates directly with the database to load the messages on log-in. When a user is online, the user communicates directly through SignalR connections.
I need to find a way to make this communication secure (teacher suggested Diffie Hellman to exchange keys). It would really be appreciated if any of you guys could put me on the right road where to start or if you could suggest me some articles which could help.
Note: I am a Java Developer and am new to .Net Framework and C#.
If any of you is interested here is the github link to my project: https://github.com/joanjanku2000/chat-app/tree/jjanku/feature/chat-app
You need to read documentation first in order to choose the right encoding/decoding technique.
Read these :
https://learn.microsoft.com/en-us/dotnet/standard/security/cryptography-model
https://learn.microsoft.com/en-us/dotnet/standard/security/generating-keys-for-encryption-and-decryption
https://www.c-sharpcorner.com/article/encryption-and-decryption-using-a-symmetric-key-in-c-sharp/

What are the best practices for implementing encryption logic in iOS? [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 5 years ago.
Improve this question
I'm trying to implement payment mechanism in iOS app. So i want send payment related details like card no, card holder name e.t.c. to our server(C#) with encryption for secure communication between mobile and server. Please suggest some good encryption and decryption techniques.
Thanks in advance.
Use HTTPS. Set the server up to support TLS 1.2 and Perfect Forward Secrecy. On the client pin the certificate to prevent MITM attacks.
If you are saving full CC numnbers on the server you will need to be PCI compliant.

ASP.NET Identity to a remote database using RESTful API [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 6 years ago.
Improve this question
I'm in a situation where I do not have the option to connect directly to a database (the typical ConnectionString and DBContext way), but instead, I'm forced to use a RESTful API to get and post data from, and to the database.
I difficult to explain, so here's a tiny architectural graph instead.
Easy to see, the web application can talk with the REST API, but it CANNOT connect directly to the database
PROBLEM
I'd love to use the built-in authentication system that ASP.NET Identity provides, but I'm going in completely blind. I have not been able to find any examples with REST API calls to get users, roles, etc.
I hope that some of you might be able to lend a hand. The architecture is as it is, and it's out of my hands to change it.
My team is currently using a similar system. Our solution was to use Authentication Forms, which we found easy to setup using this article. Granted it is a bit outdated, but it works for what we wanted to accomplish with a small amount of time.
Sorry, I know Its not much, but it was a very easy tutorial to follow. Feel free to ask for any more examples as you work through it!

Does an asp.net web service have a maximum number for incoming connections? [closed]

Closed. This question needs details or clarity. It is not currently accepting answers.
Want to improve this question? Add details and clarify the problem by editing this post.
Closed 6 years ago.
Improve this question
I want to stress my .net web service, It feels like something is limiting the concurrent connections I can have.. even when trying from 2 different computers on them server the results were pretty the same. (All of this is done locally, server and clients are on local network so response time is very fast)
So is there a settings I need to change in my server machine to allow more incoming connections?
There are various things that can limit the amount of processing possible, each of which require research to see if they apply. So you might want to add more to your question about what has been verified today.
Regardless, based on your information I would assume that SessionState is enabled. This, with default behavior will limit processing to a single request at a time for each client due to synchronization locks for guaranteed read-write ability. I assume this is the root cause of what you are seeing today. This StackOverflow post talks about this specifically
Others have posted various details in the comments that can help also.
I have found though that load testing is best done from outside sources as well to ensure your entire production pipeline is involved. (Network components, etc)

Client-server TypeScript app - which server kind? [closed]

Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 8 years ago.
Improve this question
I would like to start making a JS application that works with C#-based server. It will be a small website with some features that should be performed at the server-side (database + basic account authentication needed).
I wanted to use HTML5 + TypeScript to create a client.
I have some questions:
What is the best idea to make a server?
What kind of client-server communication should I choose?
What about hosting? Should I use Windows Azure or anything different?
What is the best idea to make a server?
Really broad question. No best. Advice : Using something that is API focused. If you want to keep it all in TypeScript (to decrease cognitive overload) you can use Node.js + Express http://expressjs.com/
What kind of client-server communication should I choose?
You have two broad categories. Server side rendering (where you modify the HTML returned from the server before it reaches the client) and Client side rendering (where you modify the HTML based on some client JavaScript, example with angular : https://www.youtube.com/watch?v=WdtVn_8K17E&hd=1). You will most likely use a combination of both.
What about hosting? Should I use Windows Azure or anything different?
Again really broad. Depends a bit on your server side tech. Both Azure and Amazon (EC2) are good first choices and basically provide you a hosted virtual machine in the cloud on which you can put whatever you want.

Categories

Resources