.NETGURU
  Search:  
NamespacesDiscussions.NET v1.1Dot Net Guru's BlogIT Certification
encrypt before serializing
Messages   Related Types
This message was discovered on microsoft.public.dotnet.framework.remoting.

Post a new message to this list...

Hazzard
I have some xml tokens that need to be serialized before sending off to a
client. The token class inherits from MarsalByRefObject.
I need to encrypt the tokens also. That should be done first before
utilizing any of the serialization mechanisms. Right? thx -g

p.s. I think the answer is obvious but i can't quite picture the
transformation from xml string to encrypted string to serialized, I guess
binary format.
Reply to this message...
 
    
Lord2702
Thu. Sep. 02, 2004 12:25 PM PT

You can use both Binary and SOAP serialization, since you are encrypting it
first, before sending it to the other AppDomain, hence both shld work. But
make sure, if you have private fields in your object, the you have to have
use Binary format.

Good Luck.

"Hazzard" <Click here to reveal e-mail address> wrote in message
news:Click here to reveal e-mail address...
[Original message clipped]
Reply to this message...
 
    
Ken Kolda
The SOAP formatter will also emit private fields. It is the XmlFormatter
(from System.Xml) which will not (and this formatter is not an option for
..NET remoting).

Ken

"Lord2702" <Click here to reveal e-mail address> wrote in message
news:%Click here to reveal e-mail address...
[Original message clipped]
Reply to this message...
 
    
Lord2702
Ken, Thanks for more info.

"Ken Kolda" <Click here to reveal e-mail address> wrote in message
news:Click here to reveal e-mail address...
[Original message clipped]
Reply to this message...
 
    
Ken Kolda
You have two choices here:

1) Encrypt your data at the point of serialization/deserialization. To do
this, just implement ISerializable and the encrypt the data before adding it
to the SerializationInfo object. Also, decrypt it once you read it out.

2) Create an encryption sink for your communications. This will allow ALL of
your trasmissions between client and server to be encrypted. This is much
more complex, but provides much more complete security. Alternatively, you
could buy a product which already supports this, such as Genuine Channels
(www.genuinechannels.com).

Ken

"Hazzard" <Click here to reveal e-mail address> wrote in message
news:Click here to reveal e-mail address...
[Original message clipped]
Reply to this message...
 
 
System.AppDomain
System.Runtime.Serialization.ISerializable
System.Runtime.Serialization.SerializationInfo




ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
Ad


Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews
.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT
Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project
FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.
Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials
 
ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
 Copyright © ExamGuru, Inc. 2001-2006
Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification