I understand that the latest and greatest thing is sofware was a service. but I was wondering... Yeah, I can use my expression blend, and set up all my database interactivity to run from a web service. That is not a problem. It works great internally on my intranet domain. However, I don't want everybody being able to pass updates to my db using a web service that I exposed.
What is the best way to secure the web service if you are going to use this sofware as a service. I know that I can put the username and password requirement in a soap header. You pass in the hashed value and authenticate against that, but I have not seen any examples of setting that up for usage with silverlight, and the saas model. Do I need to read more about WCF?? Can anyone point me in the right direction on this???Patrick Pearson