2
votes
1answer
242 views

How to Verify the Identity of the Caller of a Web Service

I have a server which is composed of a page and a web service. The web service is intended to be used by a Windows Phone mobile application that I will develop myself. Now, my question is, how do I ...
0
votes
1answer
109 views

Securing the SOAP Messages

One of my clients wants to encrypt few sensitive information which will be transferred through webservices / SOAP. My client has the following suggestions: Encrypt the sensitive data with AES ...
6
votes
4answers
3k views

HMAC/PBKDF2 vs Simple hashing algorithm for web service authentication?

We are in the process of creating a web service and have been investigating ways of securing it. In reality, the service is likely to get very little traffic and the data is likely to be of little use ...