Tag Info

New answers tagged

2

My problem is that I don't want anyone else to be able to use the web service. Meaning that only the applications should be able to call the web service to get information or execute an action on another application. Is there any "simple" way to do that? There are several ways. You say you use HTTPS; so you can add a simple authentication ...


0

If you were using WCF you could use authentication to only allow specific users run specific methods. I use this in an intranet envoironment. I am not 100% but this might be a good starting point to use WCF or find an equivalent method in whatever technology you are using to call methods.


0

This is a broad topic. First, for local storage of sensitive data, iOS offers Keychain Services. In a nutshell, Keychain is an encrypted database and iOS ensures that no app can access other apps' Keychain items (that is, if device is not jailbroken). For protecting data in transit iOS offers SecureTransport Framework, although you are unlikely to use it ...


0

The address bar doesn't do anything. It's the web application which appearently takes the URL and inserts it right into the HTML markup, leading to a cross-site scripting vulnerability. This happens either server-side or client-side: Either the PHP script delivers the page with the URL already in it, or there's a piece of JavaScript code which injects the ...


0

That is the same as filling a form which has an input field named page with the following data text-file-viewer.php/"><script>alert("test");</script> If you get the alert pop-up, the server is writing the user input as is.


0

SSL is already included in most libraries nativelly, so the difference between a plain text webservice and the SSL version is negligible in terms of development on both sides. If the client makes use of persistent connections or reuses the SSL session, the negotiation between client and server is even lighter and faster. The authentication proccess is easier ...


2

Misconceptions Play Framework 2 doesn't have its own dependency management or repositories, it uses SBT which in turn uses the existing Maven Central repository, which is where pretty much all Java packages live. Regarding the downloading on load, this does not happen. No libraries are downloaded when you run an application built with SBT. Libraries are ...


3

PGP/GPG is generally not used for web services. It relies on anyone communicating to have the public key of who they're communicating with. In web services this generally isn't guaranteed. So depending on the type of service you're providing this might not be ideal. If you're trying to only provide services to a select group of people then you'd have ...


1

SSL will be faster than SOAP+PGP. Cryptographically, both SSL and PGP are hybrid systems which use public key cryptography to protect symmetric session keys. In practice, SSL has been tuned on the client and server side to do what it's doing quickly, PGP hasn't been optimized for this case. And you'll have to figure out your key distribution and trust ...


1

You could try Boxcryptor. I haven't used it personally, but it looks like you can manage and create groups for secure file sharing. The video on how to do secure file sharing on their site. Which is included in the free version of their software. I know it isn't a service, but have you looked into using PGP/GPG? With PGP/GPG you can create a ...


1

Citrix ShareFile is one such service. It is primarily used for transferring large files, but you can encrypt them. It's not free, though.



Top 50 recent answers are included