The azure tag has no wiki summary.
7
votes
2answers
472 views
What information is exposed by simply opening an RDP connection to the internet?
Microsoft, Rackspace and other hosted providers allows people to RDP into that server.
Here are a few examples: Microsoft has something called "Azure Connect" it is very easy to expose a domain ...
5
votes
5answers
891 views
Should one sign and encrypt using the same key? The Azure Training Labs are taking this approach
I'm taking the Azure lab LoadBalancing with WCF and recognise what I have been told is bad from a security perspective, but am not sure if it applies here.
Can someone look at this code and tell me ...
5
votes
2answers
363 views
What is more secure: Many subdirectories, or many subdomains?
I have 3 websites that could be configured as a "VirtualApplication" in servicedefinition.csdef:
www.mydomain.net/enroll
www.mydomain.net/admin
www.mydomain.net/
... or I can configure them as a ...
5
votes
2answers
481 views
What are the security risks of the Azure Service Bus, and how do you mitigate them?
The Azure Service Bus is a way to relay SOAP/WCF information though the "cloud" as a XML over HTTPS payload.
One risk that I see is that it essentially allows a user with only outbound HTTP/S ...
4
votes
2answers
538 views
Are some STS token formats better than others (SAML vs SWT vs JWT)
I'm configuring an Azure ACS STS and would like to know if there is any impact on security based on the following token formats or how they are used.
The corresponding help link takes me to MSDN ...
1
vote
1answer
194 views
What risk can untrusted WS-Federation metadata pose?
I'm adding support for SAML/ADFS/Azure ACS and read that untrusted metadata poses a risk.
Considering that ADFS does background refreshes of the metadata, as do some RPs, can someone explain the ...
