Web Services with SSL

[Chizl]

When I Google, C# Web Service SSL, I get back everything for IIS, running
SSL for C# developers.. Not what I'm looking for.

I've developed my own Web Server in C# and I want to support SSL. As a
test I changed the port over to 443 and had my browser hit it. It hits it
fine, but as I'm watching the data that came from IE it looks encrypted by
default.

(2) Questions..

1) Where is a good starting point, web site, url, that will help me
understand what I need to do to add SSL support to my web server. Possibly
not something like W3 that is cryptic to me already.

2) I thought IE would make a request then the Web Server would respond with
the cert to be used, why is the data coming from IE already encrypted?

 

[Laura T.]

Here some starters. Search for .NET https or WCF https and so on.

http://msdn2.microsoft.com/en-us/library/ms996415.aspx
http://weblogs.asp.net/jan/archive/2003/12/04/41154.aspx
http://msdn2.microsoft.com/en-us/library/aa302409.aspx#secnetht14_step6
http://msdn.microsoft.com/msdnmag/issues/06/08/securitybriefs/default.aspx
http://blogs.msdn.com/drnick/archive/2006/04/14/configuring-http.aspx
http://www.15seconds.com/issue/020312.htm

 

[Nicholas Paldino [.NET/C# MVP]]

Chizl,

You really ^want^ to look at a spec, as most of the browsers are going
to adhere to the same spec when interacting with a server that supports SSL.

When using SSL, you are using transport layer security. You might want
to look at the Wikipedia entry on it to see why IE doesn't just make a
request in plain text:

http://en.wikipedia.org/wiki/Transport_Layer_Security

As for what you can do, you should look at the SslStream class in the
System.Net.Security namespace. It will should do what you want.

 

[Chizl]

Chizl,

You really ^want^ to look at a spec, as most of the browsers are going
to adhere to the same spec when interacting with a server that supports
SSL.

When using SSL, you are using transport layer security. You might want
to look at the Wikipedia entry on it to see why IE doesn't just make a
request in plain text:

http://en.wikipedia.org/wiki/Transport_Layer_Security

As for what you can do, you should look at the SslStream class in the
System.Net.Security namespace. It will should do what you want.

Great thanks, I'll check it out.