Authentication

[bernardpace]

Hi,

I need to authenticate users from the client part with the server using
a username and password. Since authentication data needs to be secure,
I was thinking of not sending any username and password to server.

I read some articles about message digest. If I read correct, the
process is as follows:

Server submits a hashing key;
Client encrypts data with key;
Client concatenats encrypted data with key and submits them to server;
Server encrypts all his username and password with this key till he
finds a match with data received.

Is this process of message digest?
How can this be done in C#?


Can someone help me out
Thanks in Advance

 

[William Stacey [MVP]]

Are you using some existing comm tech like WSE, web services, Indigo, or are
you using sockets?

 

[bernardpace]

Sockets: TcpListener, TcpClient

 

[William Stacey [MVP]]

fx 2.0 has SslStream and NegotiateStream classes that you can wrap your
socket with to provide secure session.

 

[bernardpace]

From where can fx 2.0 be imported?

Thanks

 

[bernardpace]

From where can fx 2.0 be imported?

 

[William Stacey [MVP]]

Download one of the VS 2005 versions:
http://lab.msdn.microsoft.com/vs2005/get/