c# - Need help in protecting WCF service -
i'm developing wcf service , wnat protect service unauthorized users. i'm planning add parameter "rsakey" service , client (addin) generate , sends rsakey every request , service check passed rsakey time ip , serves if valid.
but question here is, if 1 decompiles client (addin) though fuscated if guess of actual function generating "rsakey", can call method , generate rsakey , use service without problem.
so, there anyway protect service consumed valid/allowed clients? note: 1 big thing conside is, want distribute/give clients freely public usage without credentials. same time want protect massive copy/miss usage of service.
short answer: no.
the problem here client needs able connect. copy of client , time/knowledge can figure out how works, , make own client passes same thing. they're free whatever want.
a lot of money gets put trying accomplish type of drm big companies, , it's broken. obscurity real way type of thing works (where nobody bothers break it).
the service has try , protect misuse, either through authentication or through trying sanity check calls being made block whatever you're trying prevent. you're trying isn't secure.
(what service you're concerned it, anyway?)
Comments
Post a Comment