Quantcast
Channel: Common Language Runtime Internals and Architecture forum
Viewing all articles
Browse latest Browse all 1710

Most secure way to accept confidential information using an http application?

$
0
0

Hi,

I really don't know what forum to ask this in - so please guide me in the right direction if this is completely off.

I have the need to accept a http-post. It can be in IIS using an aspx handler, asmx or wcf service it doesn't really matter. The post will be done using HTTPS. The post is not guaranteed to include a content-type, soap structure or anything. The only guarantee is that the data is valid XML. In other Words, if the data is XML I must accept it.

The data is confidential and as such we can't have that this data is logged or anything.

Since the requirement is that the protocol is HTTPS, I figure that the easiest way to do this is running the application under IIS. But I have to be sure that IIS doesn't log the request if some failure happens.

I could use a WCF service that accept a Stream - but that would only Work if the sender specifies the content-type I think. I could use the aspx-handler and access the HTTPRequest stream. Or I could build a HTTPHandler. I guess that when talking about IIS, the best way would be to grab the byte-stream at the earliest stage possible.

I could also ditch IIS and use a HTTPListener - but that would not be as easy to run under HTTPS as a simple IIS certificate.

What would you recommend? Any idea, thought or redirection is more than welcome!

--
Werner

 


Viewing all articles
Browse latest Browse all 1710

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>