Monthly Archives: February 2005

One of the features i really like in .NET 2.0 is that you get Kerberos support. NegotiateStream is an implementation of AuthenticatedStream (as SslStream is), so the source code is very similar to my last post. Notice that you can … Continue reading →

Just a quick sample how to get up and running with SslStream in .NET 2.0 (works with november CTP). you can download the source here. enjoy. SslStream.zip (8.32 KB)   The ServerIt’s pretty straightforward – grab the server certificate from … Continue reading →

if you want to play around with SslStream in Whidbey, the hardest part is to get ahold of the right type of certificate (in the right store). If you don’t have a full blown CA around (like OpenSSL or Windows … Continue reading →

If you instrument your code with System.Management.Instrumentation you’ll have to adjust permissions if non-admin or non-local system/network/local service code wants to publish information. If you run installutil provider.dll from the command line you’ll find the generated MOF file under system32wbemframeworkrootyour-provider-namespace … Continue reading →

Thank you very much for attending the post conference. You can find the slides and the demo app here. cheers! SlidesPostCon.pdf (362.29 KB) / FormsAuthBestPractice.zip (171.39 KB)  

here are the slides for my DevWeek talks – some of them have slightly changed since the deadline for the conference companion materials. so grab the newest versions here. thanks for attending!!! What’s new in .NET Security 2.0New Security in … Continue reading →

so i just arrived in London at DevWeek – nice venue – looks like big fun this week… i’ll keep you updated  

From the Samoa site (previous post) WSE Policy Advisor is a security plug-in for Web Services Enhancements 2.0 for Microsoft .NET (WSE). It can be invoked either from the WSE Configuration Editor or as a stand-alone tool. It examines the … Continue reading →

Collection of papers, links, and ideas from Microsoft Research. via Mike Gunderloy  

I saw the HttpOnly flag for cookies mentioned in several blogs recently. HttpOnly is a new flag that you can append to a cookie, which makes the cookie unavailable to client side script (e.g. ‘document.cookie’). Microsoft introduced that, and it … Continue reading →