NegotiateStream Class and SOAP Web Services?

[Monkey Boy]

Hi, I just heard about the NegotiateStream Class and I’m wondering if I can
use it to protect traffic on the wire between my client (.net winforms app)
and server (.net web service)?

Right now I’m using SSL, leveraging the built in support that IIS offers,
but since my app only runs on the intranet I’m wondering if NegotiateStream
would make more sense. SSL works fine when you get it set up, but there is
quite a bit of overhead when my customers first deploy (e.g. issuing certs,
configuring IIS, making sure that clients trust the right CA etc.).

NegotiateStream sounds ideal for my purposes, but I can't see an obvious way
of getting it working with my web service. Today my client uses SOAP proxy
classes generated by wsdl.exe to talk to my web service, how do I make use of
NegotiateStream?

Thanks.

[Mohamoss]

Hi
you would rather use Negotiate stream to agree on an authentication
protocol rather than security purposes. Would I would suggest is that you
take a look at WSE 3.0 if you would like to use message level security
instead of the end to end security model of SSL. WSE already offer
predefined security scenarios ( it call it Turn Key scenarios).

Mohamed M Mahfouz
Support Engineer