WS parameters & return values data integrity

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello All

I have built a web service that accepts and sends binary data encoded as base64 strings
What I need to know is if the .NET framework infrastructure checks the integrity of the dat
being passed arround or do I need to do it in the application layer

I must point out that the web service clients are PDAs running on the .NET CF and communicatin
via GPRS with the Web Service. So the big question is do I rely upon the underlying network layers o
do I do the integrity checks myself adding checksums and stuff like that

Thanks in advance
 
there are no direct checks.
indirectly it would fail if the SoapMessages are not valid XML,
and it probably fails if the HTTP RequestLength is not correct;
but somebody could definitely intercept the message and mess with your
base64.

i would do checksums at a minimum.
would probably also add a timestamp, nonce, with some keyed hash.

you might also consider using DIME too.
http://www.brains-N-brawn.com/spWse

Thanks,
casey
 
Back
Top