Secure Credential's pwd handling -
08-29-2007
, 09:08 AM
Hi,
I need to provide my own network credentials to a web request (in a Windows
Forms Application):
HttpWebRequest req = ...
req.Credentials = new NetworkCredential( userName, PWD, userDomain );
how to manage PWD from 'input by user' to 'NetworkCredential' in a security
safe manner?
Even using stuffs like 'CredUIPromptForCredentials' (rather than write a
login dialog)
the underlying String type is not secure. Also 'NetworkCredential' ctor's
pwd parameter's
type is a String. (Better if all this pwd passing could be done by
'SecureString'-like types, right?)
thank you |