October 2003 - Posts - Yves Reynhout's Blog

XRML vs XACML

Found this post on the XACML mailing list. This is very interesting in light of the fact that the Longhorn SDK (WinFx) will contain support for XRML via the System.Authorization namespace. I sometimes doubt that building NAuthorize will make a difference, but I guess only the future will tell.

Posted Oct 28 2003, 10:37 AM by yreynhout with no comments

Filed under: NAuthorize, .NET

Hosting NAuthorize

I'm considering setting up NAuthorize at Novell Forge. The project is starting to come along (slowly), but I still have to put in a lot of infrastructure code. I prefer to work in the dark for a while before releasing anything (it also gives me more room to shuffle things around).

Posted Oct 23 2003, 12:05 AM by yreynhout with no comments

Filed under: NAuthorize, .NET

Security

Today was the last day of a three-day course on Web Application Security (given at Business Training by Ascure). I was familiar with most of the content presented (then why did I go? boss' orders). It was a nice overview for developers who are not security-aware. Amazingly, "Web Application Security" is still oriented very much towards network security (SSL, HTTP, TCP, IP, Firewall, IDS, ...) and infrastructure (Servers, DMZ, topology). A product I wasn't very much aware of is Sanctum's Appshield, which allows you to define which HTTP requests go through (it even has a learning mode) based on HTTP headers, HTTP POST or GET parameters and their possible values, and a lot more.

Posted Oct 22 2003, 11:32 PM by yreynhout with no comments

Filed under: Corporate, .NET

Typed Reflection

I wonder if anybody is toying with this subject. Lately, I find myself reflecting types and as a result either writing a bunch of utility functions or plain inlined reflective code. This topic sounds a lot like a Typed DataSet, only I want a Typed Type.

Posted Oct 14 2003, 11:52 PM by yreynhout with no comments

Filed under: NAuthorize, .NET, Object/Relational Mapping, Code generation