0
votes
1answer
48 views

HTTP Status Codes - security considerations

I am designing an authorization framework and now I am thinking about the error codes which I should return when someone is trying to access a resource and he doesn't have the required permissions. ...
0
votes
1answer
71 views

Service TO Service Authentication & authorization [duplicate]

I have two web services A and B the requests between those services is http. I want so establish a secure connection between service A and service B to ensure the authorized and authenticate request ...
6
votes
1answer
629 views

Do I need to keep the NTLM token in the HTTP Authorization header a secret?

I'm troubleshooting a problem with one of our vendors and plan to send them a Fiddler trace of the http traffic between the client and our servers while replicating the issue. Our servers use NTLM ...