MSDN Screencasts | By Presenter | Dominick Baier

CardSpace Implementation Strategies

Fri, 22 Jun 2007 20:17:29 GMT

In this video we take a look at some additional considerations that you might want to think about when using Windows CardSpace as an authentication mechanism.

Windows CardSpace and Certificates

Fri, 22 Jun 2007 20:12:34 GMT

Windows CardSpace relies on public key cryptography so you are going to be setting up some certificates in order to get things working. In this video, we take a look at what you'll need and some of the details of the newer kinds of certificates involved.

Using Windows CardSpace with WCF

Fri, 22 Jun 2007 19:37:56 GMT

In this short session we'll take a look at how we can use CardSpace when working with services implemented with WCF.

Using CardSpace with ASP.NET

Fri, 22 Jun 2007 19:26:34 GMT

Here we'll look at how you can use Windows CardSpace in order to authenticate users of your web site.

Client Certificates

Mon, 26 Jun 2006 07:00:00 GMT

In this session we'll take a look at how we can use X509 certificates to authenticate clients to IIS-hosted web applications. We'll look at picking up details of the client certificate from .NET code and also how to set up certificates within IIS itself.

Impersonation

Mon, 26 Jun 2006 07:00:00 GMT

Windows is inherently multi-threaded, and it is possible that within a single process there are threads running in a security context that differs from that of the process itself. In this session we'll take a look at how to go about this process of impersonation and how to do that in ASP.NET, and we'll discuss some 'gotchas' around using impersonation.

Protected Data

Mon, 26 Jun 2006 07:00:00 GMT

In this session we look at using the Data Protection API (DPAPI) for protecting data stored on the machine, using information already stored in a secure way by the operating system. We'll also take a look at how to protect application configuration files using similar techniques.

Storing Passwords

Mon, 26 Jun 2006 07:00:00 GMT

Storing passwords is dangerous and to be avoided unless you cannot find another mechanism. When you do have to store passwords, you'll benefit from this session, which walks through topics such as hashed password, salted hashes and iterated salted hashes using the .NET Framework.