DeepakGa

Hi,

I want to implement security to web services using UserNameOverCertificate turnkey security scenario which is supported by WSE 3.0.

To implement this I will need to have a certificate, which can provide me public/private key for encryption.

a) Can anybody tell me whether I go for Certificate Authority, like VeriSign or should I create my own certificate by using MakeCert.exe tool

b) Is there any disadvantage of our own certificates

Thanks,

Deepak



Re: ASMX Web Services and XML Serialization Web services security : Certificate Authority Vs Our own certificate using MakeCert.exe

Pablo Cibraro

Hi,

a) For production applications, you should not use test certificates created by MakeCert.exe, they have some performance issues. It is better to get a certificate from a Certificate authority or your own certificate server.

b) No, it is the same thing, as long the users trust your certificate.

Regards,

Pablo.






Re: ASMX Web Services and XML Serialization Web services security : Certificate Authority Vs Our own certificate using MakeCert.exe

DeepakGa

Hi Pablo,

Thanks for your reply.

As I want to use it for production application so I will go for 3rd party certificate instead of my own certificate.

Thanks,

Deepak





Re: ASMX Web Services and XML Serialization Web services security : Certificate Authority Vs Our own certificate using MakeCert.exe

SIYAULHAQU

Hi,

Could you please clarify the peformance issues wrt to test certificates during production. I could not find any concrete reason from anywhere on the same.

Thanks,

Siya