c# generate barcode from string Lesson 3: Using Digital Signatures to Ensure Message Integrity in C#

Generating GS1 - 13 in C# Lesson 3: Using Digital Signatures to Ensure Message Integrity

You can use the following questions to test your knowledge of the information in Les son 3, Using Digital Signatures to Ensure Message Integrity. The questions are also available on the companion CD if you prefer to review them in electronic form.

Answers to these questions and explanations of why each answer choice is right or wrong are located in the Answers section at the end of the book.

1. Which of the following are objectives of digital signatures (Select all that apply.) A. Authentication B. Authorization C. Integrity D. Confidentiality 2. What types of tokens can be used with a WSE 3.0 file (Select all that apply.) A. Kerberos B. X.509 C. UserNameToken objects D. Custom binary

To further practice and reinforce the skills you learned in this chapter, you can per form the following tasks:

Review the chapter summary. Review the list of key terms introduced in this chapter. Complete the case scenarios. These scenarios set up real-world situations involv ing the topics of this chapter and ask you to create a solution. Complete the suggested practices. Take a practice test.

Summary

Web Services Enhancements provide extended functionality for Web services. Web Services Enhancements build on the various WS-* specifications. WSE can be used to provide powerful custom security features. The WebServicesClientProtocol is the base class from which Web service proxies that use WSE functionality inherit. A Web reference is needed to consume a Web service. Each proxy, however, must use the WebServicesClientProtocol instead of the SoapHttpClientProtocol. Configuration files provide a powerful and flexible mechanism for using WSE 3.0.

Do you know what these key terms mean You can check your answers by looking up the terms in the glossary at the end of the book.

authentication digital signature Direct Internet Message Encapsulation (DIME) integrity Kerberos Message Transmission Optimization Mechanism (MTOM) WS-*

In the following case scenarios, you apply what you ve learned about how to use Web methods and Web services. You can find answers to these questions in the Answers section at the end of this book.

This case scenario describes a typical deployment scenario whenever a company starts using Web services. At first, getting the services to work is first priority. But immediately afterward, issues such as security and performance become critical. This case scenario discusses how to address such concerns.

Following is a list of company personnel interviewed and their statements:

We are a little late into the game when it comes to Web ser vices. However, we re trying to get on board as fast as possible. So far, we ve seen so many protocols that it s hard to decide what is hype and what is appropriate. The one thing we can definitely tell, though, is that rolling out our own solution doesn t make much sense.

The days of security by obscurity are over. Every client we have asks about our security procedures and they see right through fluff. They ask intelligent questions and demand intelligent answers. We need to have real answers for them. The only way to do this is to have flexible and exhaustive secu rity. Can WSE help here

Taking security seriously is a matter of survival. I know better than anyone that security doesn t get you any recognition until it s not there, but I m willing to do whatever I have to so I can sleep soundly at night knowing my customers data is secure. And I can t listen to anything else about how you have to trade off security for performance. We need both!

Answer the following questions for your manager. 1. Do Web Service Enchancements fit into our development story 2. If we use WSE, can we implement advanced security or performance features without taking a year to learn how to do it