Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    Only $11.99/month after trial. Cancel anytime.

    Securing .NET Web Services with SSL: How to Protect “Data in Transit” between Client and Remote Server
    Securing .NET Web Services with SSL: How to Protect “Data in Transit” between Client and Remote Server
    Securing .NET Web Services with SSL: How to Protect “Data in Transit” between Client and Remote Server
    Ebook52 pages18 minutes

    Securing .NET Web Services with SSL: How to Protect “Data in Transit” between Client and Remote Server

    By Slava Gomzin

    ()

    Read preview

    About this ebook

    Booklet for developers and security professionals on how to implement SSL in order to protect data transmission between .NET client and server. The guide contains examples of the client application code and certificate validations in C#.

    Topics include: what is SSL certificate and how to use it to secure .NET Web Services, how to create server and client test certificates, implementing SSL in server and client applications, extra validations of server certificate on client side, and more (Article: ~3,300 words).

    Table of Contents includes:
    Introduction
    Vulnerabilities Due To Insecure Communication
    Difference between SSL and TLS
    Securing Data Transmission with SSL
    Different Levels of Security Provided by SSL
    SSL Implementation Modes
    Server Certificate Only
    Server and Client Certificates
    SSL Certificates
    Certificate Issuing Methods
    Self-Signed Certificate
    Certificate Issued Using Self-Signed Root Certificate
    Certificate Issued through Local Certificate Authority
    Certificate Issued through Public Certificate Authority
    Test Certificates
    Server Test Certificates
    Creating Test Certificate Authority
    Creating Server Test Certificate for Specific Server Host Name
    Creating Server Test Certificate for localhost
    Creating Standalone Self-Signed Test Server Certificate (without CA Root)
    Obtaining Test Server Certificate from Public Certificate Authority
    Going to Production
    Client Test Certificate
    Creating Client Test Certificate using Root CA Certificate
    Implementing SSL on Server
    Web Server Configuration
    Server Application Configuration
    Server Application Code Changes
    Implementing SSL on Client
    Client Application Configuration
    Client Application Code Changes
    Additional Server Certificate Validations Performed by Client
    Testing
    Conclusion
    Resources
    About the Author

    Slava Gomzin, CISSP, PCI ISA, PCIP, ECSP, Security+ has more than 15 years of professional experience in software development and security including
    12 years in application development for retail industry and electronic payments,
    10 years in .NET and SQL Server development,
    6 years in application security and PCI compliance.
    Slava Gomzin is Security Architect at Retalix USA. He lives in Dallas, Texas.

    LanguageEnglish
    PublisherSlava Gomzin
    Release dateApr 18, 2012
    ISBN9781476064451
    Securing .NET Web Services with SSL: How to Protect “Data in Transit” between Client and Remote Server
    Author

    Slava Gomzin

    Slava Gomzin is a Security and Payments Technologist at Hewlett-Packard, where he helps create products that are integrated into modern payment processing ecosystems using the latest security and payments technologies. Prior to joining Hewlett-Packard, Slava was a security architect, corporate product security officer, R&D and application security manager, and development team leader at Retalix, a Division of NCR Retail. As PCI ISA, he focused on security and PA-DSS, PCI DSS, and PCI P2PE compliance of POS systems, payment applications, and gateways. Before moving into security, Slava worked in R&D on design and implementation of new products including next-generation POS systems and various interfaces to payment gateways and processors. Slava currently holds CISSP, PCIP, ECSP, and Security+ certifications. He blogs about payment security at www.gomzin.com.

    Read more from Slava Gomzin

    Related to Securing .NET Web Services with SSL

    Related ebooks

    Security For You

    View More
    View More

    Related podcast episodes

    Related articles

    • Article

      Mailserver MAILSERVER

      Nov 16, 2021

      Mailserver MAILSERVER
      4 min read

    • Article

      More On Let’s Encrypt

      Mar 10, 2020

      Let’s Encrypt launched in 2016 and offers both individuals and organisations a way to obtain completely free TLS (historically called SSL) certificates, allowing traffic to be encrypted between a web browser and server. Let’s Encrypt makes use of a c

      1 min read

    • Article

      NetSupport Manager 14

      Sep 7, 2023

      PRICE 1-500 systems, perpetual licence, £10 each exc VAT from netsupportmanager.com SMBs that want the best on-premises remote support solution need look no further than NetSupport Manager (NSM). Now well into its third decade, NSM has been continuou

      2 min read

    • Article

      NetSupport Manager 12.8

      Aug 13, 2020

      NetSupport Manager 12.8
      2 min read

    • Article

      Easy Https With Certbot

      Jan 12, 2021

      Certbot is a tool from the Electronic Frontier Foundation that automates the generating and updating of free SSL certificates from Let’s Encrypt. This enables you to serve content over HTTPS, which provides encryption, but also some guarantees that y

      1 min read

    • Article

      Extra Measures

      May 16, 2022

      When you connect to a VPN, as well as proxying your traffic and setting the corresponding updates to your routing table, it may also provide you with different DNS settings. On paper, this was a reasonable idea. Traditional DNS requests (for example,

      4 min read

    • Article

      VPNs For Remote Workers

      May 11, 2023

      VPNs For Remote Workers
      8 min read

    • Article

      Extra Measures

      Apr 26, 2022

      WHEN YOU CONNECT to a VPN, as well as proxying your traffic and setting the corresponding updates to your routing table, it may also provide you with different DNS settings. On paper, this was a reasonable idea. Traditional DNS requests (for example,

      4 min read

    • Article

      Five Key VPNs for Your Apple Gear

      Aug 1, 2021

      Five Key VPNs for Your Apple Gear
      5 min read

    • Article

      Seed Your Own Cloud

      Oct 22, 2019

      Seed Your Own Cloud
      10 min read

    • Article

      Buyer’s Guide: Seven Steps To Sweet Security

      Jun 10, 2021

      Not necessarily. Several security suites are available in both paid-for and cut-down free editions. Indeed, Windows’ built-in antivirus measures have been getting smarter over the years to the point where they now provide protection that’s at least o

      5 min read

    • Article

      An A-Z Of Web Hosting Security Best Practice

      Feb 11, 2021

      Online breaches are big news and have big impacts on big business. But what about the small business operators? The ones who can’t afford to outsource their web security, let alone to fund in-house security teams? More often than not, these businesse

      8 min read

    • Article

      Starletter

      Sep 11, 2022

      We have used Sage Line 50 accounts software for many years. Like most users we don’t use half of the facilities and only upgrade when necessary. We prefer to buy software outright and we like to have it running on our own server so that if the intern

      2 min read

    • Article

      ExpressVPN

      Sep 19, 2023

      ExpressVPN
      3 min read

    • Article

      Network monitoring 2022

      Feb 10, 2022

      Network monitoring 2022
      4 min read

    • Article

      Network Monitoring Software

      Dec 10, 2020

      Network Monitoring Software
      3 min read

    • Article

      Secure Mobile Comms

      Dec 6, 2022

      Secure Mobile Comms
      9 min read

    • Article

      Extra Measures

      Feb 8, 2022

      Extra Measures
      4 min read

    • Article

      A Matter Of Trust

      Sep 21, 2021

      A Matter Of Trust
      1 min read

    Related categories

    Reviews for Securing .NET Web Services with SSL

    0 ratings

    0 ratings0 reviews

    What did you think?

    Tap to rate

    Review must be at least 10 words

      Book preview

      Securing .NET Web Services with SSL - Slava Gomzin

      Securing .NET Web Services with SSL

      How to Protect Data in Transit between Client and Remote Server

      Application Security Series

      Slava Gomzin

      Cover Photo and Design: Alisa Levy

      Smashwords Edition

      Copyright © 2012 Slava Gomzin

      Table of Contents

      Introduction

      Vulnerabilities Due To Insecure Communication

      Difference between SSL and TLS

      Securing Data Transmission with SSL

      Different Levels of Security Provided by SSL

      SSL Implementation Modes

      Server Certificate Only

      Server and Client Certificates

      SSL Certificates

      Certificate Issuing Methods

      Self-Signed Certificate

      Certificate Issued Using Self-Signed Root Certificate

      Certificate Issued through Local Certificate Authority

      Certificate Issued through Public Certificate Authority

      Test Certificates

      Server Test Certificates

      Creating Test Certificate Authority

      Creating Server Test Certificate for Specific Server Host Name

      Creating Server Test Certificate for localhost

      Creating Standalone Self-Signed Test Server Certificate (without CA Root)

      Obtaining Test Server Certificate from Public Certificate Authority

      Going to Production

      Client Test Certificate

      Creating Client Test Certificate using Root CA Certificate

      Implementing SSL on Server

      Web Server Configuration

      Server Application Configuration

      Server Application Code Changes

      Implementing SSL on Client

      Client Application Configuration

      Client Application Code

      Enjoying the preview?
      Page 1 of 1