.NETGURU
Security questions
Messages   Related Types
This message was discovered on microsoft.public.dotnet.framework.aspnet.mobile.
Responses highlighted in red are from those people who are likely to be able to contribute good, authoratitive information to this discussion. They include Microsoft employees, MVP's and others who IMHO contribute well to these kinds of discussions.
Post a new message to this list...

Nikolay Anestev
Hi all. I have the following concerns which I'm trying to solve:
Running mobile ASP.NET( C# ) application on IIS 6.0 / Windows 2003 Server,
which must be provided with certain security. I'm reading issues about WTLS
protocol which is designed to implement this security, but few questions
aroused.
First, the authentification which WTLS automatically provides is optional. I
want all the users of this application and the server always to be
authentificated. Is this a matter of some server-side settings?
Is there a way to make my users always use security oriented connection (
commonly reffered by the 9203 port ) despite of the initial settings of the
mobile browser they have.

These are some of the questions. If someone could answer them I'd be very
thankful.
Thank you in advance.
Best regards.

Nikolay Anestev

Reply to this message...
 
    
Jean-Luc David [MS-MVP] (VIP)
Hi Nicolay,

The long and the short answer is that you need a WAP gateway between
your web server and the mobile device. The gateway will convert WTLS
traffic into SSL. The layout looks like this:

[WAP Device]<-- WTLS --> [WAP Gateway]<-- SSL -->[IIS]

Here is a more detailed explanation on thewirelessfaq.com:
http://www.thewirelessfaq.com/9.4.asp

WTLS is only supported on compliant browsers such as the jBrowser and
WinWAP Pro. Please refer to the following list of WAP Gateways (some
of them are WTLS compliant): http://www.thewirelessfaq.com/13.4.asp

Thanks,
Jean-Luc David
Microsoft .NET MVP
Click here to reveal e-mail address
http://www.stormpixel.com
http://weblogs.asp.net/jld/

--- Original Message ---
[Original message clipped]

Reply to this message...
 
 




ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
Ad


Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews
.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT
Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project
FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.
Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials
 
ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
 Copyright © ExamGuru, Inc. 2001-2006
Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification