Encrypting XML header via SoapExtension issues

[cordata5]

Hi all,
I finally figured out how to utilize the soapextension for
encrypting portions of my xml file. However I want to encrypt the
header going from the client web page to the server side web service.
Unfortunately this only works on the response from the server side web
service to the web page client. Am I missing something?

 

[Dan Rogers]

Hi,

Yes, to encrypt a call at it's point of origination, you need to have the
web service extension (or equivalent) on the caller side. Going direct
from a browser (e.g. hand slinging the XML and doing a POST operation) will
make it tough - but if you are using a rich client, or some binary logic
such as an activeX control, then you have the opportunity to possibly
introduce the same type of encryption on the caller side. In general, if
you can get your client to call a proxy class generated by Add Web
Reference, then you have the opportunity you need to introduce the code.
The issue with a direct-from-web-page approach will be getting the
app.config in the right temporary directory.

Hope this helps

Dan Rogers
Microsoft Corporation
--------------------