The endless repaint.

Recently I delivered a webinar on "Building Secure RESTFul Webservices" on Techgig  which received a very good feedback based on the Techgig survey. The webinar column was published on Gizmodo India  as well. Here is a list of key takeaways from the webinar How HTTPS work in detail and how to implement HTTP BASIC Authentication. What is Mutual SSL Authentication and how to implement it. What kind of damage can be done with security attacks like Man in the Middle and Replay Attack.  Authenticating user without passing credentials over the wire Preventing Man in the Middle attacks using Signature verification Preventing Replay Attacks using timestamp and cryptographic nonce What are OAuth 1a and OAuth 2 The code samples (written in Java) related to this webinar can be found at  https://github.com/abhilshit/bookstore   https://github.com/abhilshit/bookstore-client I am embedding the webinar recording for quick access below. Building Secu...

In this article I am going to throw some light around web service security,  user Authentication  for native mobile applications and how both the topics are connected. Me along with my cool team members at Zycus were working on the same off lately. The idea is to highlight the fact that it is ideal to implement web service security by being agnostic to the type of web service clients (like mobile apps) but these decisions may impact the mobile app user authentication process. If you are working on a mobile application that requires user authentication and fetching data from a server side application then it is highly likely that you are exposing certain functionality of your server side application via web services that can be accessed over the web by your mobile application. While developing such applications you will usually encounter following challenges.  How to secure the web service endpoints?  How to authenticate users from the mobile app in secure way...