Abt Web service security?

Hi,

I am complete newbie to Webservices, so have very basic question and that is,
if i want to use message level security instead of Transport layer level, then which is better to use , X.509 or kerberos? or any other solution.

Also, I have created a sample application using kerberos, now in order to test that application,Is there any way to check it locally, without having access to KDC server? If not,How to get access to KDC server to get tickets?

Thanx in advance.

[672 byte] By [Prajakta] at [2008-2-17]
# 1

You decision will have to be based on a few things. First, are you going to expose this service to the internet or just within your intranet? Most corporations do not expose the KDC to the internet (as far as I know) and therefore, it is usually better to go with X509 in the internet case.

You won't be able to use Kerberos without a KDC, so you will have to setup a test domain and domain controller. I would go with certificates if it were my choice...

JonCole at 2007-9-8 > top of Msdn Tech,.NET Development,ASMX Web Services and XML Serialization...

.NET Development

Site Classified