HighTechTalks DotNet Forums  

Secure Credential's pwd handling

Dotnet Security microsoft.public.dotnet.security


Discuss Secure Credential's pwd handling in the Dotnet Security forum.



Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old   
Paolo Pagano
 
Posts: n/a

Default Secure Credential's pwd handling - 08-29-2007 , 09:08 AM






Hi,

I need to provide my own network credentials to a web request (in a Windows
Forms Application):

HttpWebRequest req = ...
req.Credentials = new NetworkCredential( userName, PWD, userDomain );

how to manage PWD from 'input by user' to 'NetworkCredential' in a security
safe manner?

Even using stuffs like 'CredUIPromptForCredentials' (rather than write a
login dialog)
the underlying String type is not secure. Also 'NetworkCredential' ctor's
pwd parameter's
type is a String. (Better if all this pwd passing could be done by
'SecureString'-like types, right?)

thank you





Reply With Quote
Reply




Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.