Clever Geek Handbook

Why does time matter in web services?

In WCF web services (or all web services?), If client and server time is off, you get a security exception.

Can someone explain to me why this is?

Is it a pain if you are creating client server services and the time has to be accurate?

see: http://msdn.microsoft.com/en-us/library/aa738468.aspx

0


source to share


3 answers


I strongly suspect this should make replay attacks more severe. These are attacks where a legitimate request and / or response received by an attacker is resent at a later date.



+3


source


I saw it too.



I guess it's protection. This will make it difficult to record and play messages and resend them to the service.

0


source


Just use NTP on the server and client to keep their clocks in sync and you should be fine (if I'm missing something specific). NTP has servers all over the world and can run on both Unix and Windows. On Windows, this is even a system property, since at least WinXP times: check the Date and Time box on the Internet Time tab and enter any of the public NTP servers closest to you.

0


source






More articles:


All Articles