c# - Need help in protecting WCF service -


i'm developing wcf service , wnat protect service unauthorized users. i'm planning add parameter "rsakey" service , client (addin) generate , sends rsakey every request , service check passed rsakey time ip , serves if valid.

but question here is, if 1 decompiles client (addin) though fuscated if guess of actual function generating "rsakey", can call method , generate rsakey , use service without problem.

so, there anyway protect service consumed valid/allowed clients? note: 1 big thing conside is, want distribute/give clients freely public usage without credentials. same time want protect massive copy/miss usage of service.

short answer: no.

the problem here client needs able connect. copy of client , time/knowledge can figure out how works, , make own client passes same thing. they're free whatever want.

a lot of money gets put trying accomplish type of drm big companies, , it's broken. obscurity real way type of thing works (where nobody bothers break it).

the service has try , protect misuse, either through authentication or through trying sanity check calls being made block whatever you're trying prevent. you're trying isn't secure.

(what service you're concerned it, anyway?)


Comments

Popular posts from this blog

python - Scipy curvefit RuntimeError:Optimal parameters not found: Number of calls to function has reached maxfev = 1000 -

c# - How to add a new treeview at the selected node? -

java - netbeans "Please wait - classpath scanning in progress..." -