Featured post

c# - Usage of Server Side Controls in MVC Frame work -

i using asp.net 4.0 , mvc 2.0 web application. project requiremrnt have use server side control in application not possibl in noraml case. ideally want use adrotator control , datalist control. i saw few samples , references in codepleax mvc controllib howwver found less useful. can tell how utilize theese controls in asp.net application along mvc. note: please provide functionalities related adrotator , datalist controls not equivalent functionalities thanks in advace. mvc pages not use normal .net solution makes use of normal .net components impossible. a normal .net page use event driven solution call different methods service side mvc use actions , view completly different way handle things. also, mvc not use viewstate normal .net controlls require. found article discussing mixing of normal .net , mvc.

asp.net - Sign data in ASPX on client side -


in application, client must sign (using certificate) , send data server. doubt how should it?

to sign on client side, should use activex right? problem firefox doesn't support it. signing on server side have 2 options:

  1. save private key on server , use when necessary (if data modified during transaction sign false data)
  2. send private key when necessary (may comprise key)

despite using ssl, i'm not confortable of 2 options signing on server side... using activex may cause application more vulnerable, right?

hope can me :)

there's no single solution client-side signing in browsers, unfortunately. working on distributed signature components our secureblackbox product, , we've created java applet, activex control , flex script perform signing. however, variants have shortcomings. example, activex control can access windows certificate store. other module types user need load certificate pfx (pkcs#12) file.

uploading , signing on server won't work because private key not exportable on client (it can reside on cryptotoken or smartcard, or non-exportable), , approach makes whole process useless lowers security.

update: secureblackbox 9 in public beta now, support client-side signing (we provide activex, java , flash modules this).


Comments

Popular posts from this blog

c# - Usage of Server Side Controls in MVC Frame work -

cocoa - Nesting arrays into NSDictionary object (Objective-C) -

ios - Very simple iPhone App crashes on UILabel settext -