Authentication

  • Thread starter Thread starter bernardpace
  • Start date Start date
B

bernardpace

Hi,

I need to authenticate users from the client part with the server using
a username and password. Since authentication data needs to be secure,
I was thinking of not sending any username and password to server.

I read some articles about message digest. If I read correct, the
process is as follows:

Server submits a hashing key;
Client encrypts data with key;
Client concatenats encrypted data with key and submits them to server;
Server encrypts all his username and password with this key till he
finds a match with data received.

Is this process of message digest?
How can this be done in C#?


Can someone help me out
Thanks in Advance
 
Are you using some existing comm tech like WSE, web services, Indigo, or are
you using sockets?
 
fx 2.0 has SslStream and NegotiateStream classes that you can wrap your
socket with to provide secure session.
 
Back
Top