How to secure a client-server internet based connection?
I am using VS2010 - C#
I want to build an exchange rate monitor that has a client and a server applications.
The clients get to see the values sent by the server.
I know all the steps to create such a thing but my question is :
What is someone managed to steal the data while its being sent from the server to the c开发者_如何转开发lient ? how do you recommend protecting it from theft ?
any suggestions . . .
Use TLS (formerly SSL) to prevent eavesdropping or tampering. Additionally, if you want your clients to authenticate, you can issue client certificates and require them upon connection.
To create client certificates you need to create your own local root certificate (to become what is known as a Certificate Authority (CA)), and then issue a server certificate and client certificates using that CA certificate. I advise you to read a book on TLS/SSL to fully understand these certificates, how they relate, and how they are used by TLS.
The most relevant class to read up on if you are implementing this using .NET is SslStream. The relevant method for client certificate authentication is AuthenticateAsClient.
if you're worried about sniffers, this is a solved provlem.
http://www.openssl.org/
精彩评论