Monthly Archives: April 2007

Adding UAC manifests to apps built with VS2005 is kind of a hassle (and does not really work in all situations). I was pleased to spot this new properties dialog in VS “Orcas”:    

Web Applications that want to decrypt CardSpace tokens need read access to the SSL private key. But you would increase your attack surface tremendously if you directly grant this access to the worker process account of your application. I wrote … Continue reading →

As a follow up to the UAC article I wrote some weeks ago, I compiled some demos and a helper library. The demos show how applications behave given different manifest settings and the helper includes some useful methods like: Find … Continue reading →

Danke an alle Teilnehmer der TechDays. Es war ein schöne Konferenz und traumhaftes Wetter. Ein paar der Demos aus meinem IIS7 Talk findet Ihr hier.  

In the last post I described the unique values you can find in a card, how they are (roughly) generated and how the certificate of the application (relying party) influences this generation. Now which value do you use to uniquely … Continue reading →

InfoCards don’t have the notion of a username in the classic sense. That means you need to find some other unique value to “recognize” your users. Two unique values are created whenever you send a card to an application for … Continue reading →

After my post about punching holes in HTTP.SYS – there was some discussion going on (on this blog, on Keith’s blog and in a number of private email conversations). Let me wrap this up. Kenny commented on my post: “I … Continue reading →

I recently wrote this short article for the latest DevelopMentor newsletter. It is not as detailed as it could be – but I only had 1000 words. Maybe it is still interesting for you.   Windows Vista finally starts to … Continue reading →

James, a student on this week’s WCF course has found solutions to two things that bugged me in Visual Studio: Removing the #region tags around interface implementations when using the smart tag “Implement Interface” Setting the default startup mode to … Continue reading →

Microsoft has published a paper that compares WCF to other communication stacks (WSE, ASMX, ES…). Of course WCF is the fastest of them all (in most situations). It would have been nice to give us the test code to verify … Continue reading →