How secure is a system using a Mashup? Is it Hack proof? We are using data from other sources and should not end up sharing that data with hackers.

Posted 12/30/2009 - 14:30 by Blythe

We  build mashups for the DoD that use PKI and two-way SSL from the browser to the mashup server.  So, given the right mashup platform, mashups can be highly secure.

0
Your rating: None
Client certificate authentication - how to pass to data owners

Our scenario is that we would like to use client certificate authentication between the end-users and the mashup server.  We would also like to be able to pass this certificate authentication through to the data providers.  These might be SOAP or REST web services, or could even be files available over https.  Is this a scenario that anyone has addressed, or has any thoughts on how to approach?

An alternative might be to use an SSO approach where the mashup server and the data providers are all secured using the same SSO provider.  Is this an option and does anyone have any ideas on how this might be implemented?

Posted by koloughlin2 on Mon, 04/05/2010 - 14:58