I am played around with using the Username and Password attributes. You have to role your own code for the security or user your web server authentication capabilities. In the stuff I have played with I used pieces pulled from the following presentation http://www.bpurcell.org/blog/index.cfm?mode=entry&entry=1008 You will want to check out section 8 where Brandon talks about securing web services.
Daniel D. -----Original Message----- From: Nat Papovich [mailto:[EMAIL PROTECTED] Sent: Monday, April 12, 2004 1:20 PM To: CFC Subject: [CFCDev] web services authentication I'm interested to know if anyone is securing their published web service CFCs, and if so, how they are doing it. Is anyone using the username and password attribute of the cfinvoke tag? NAT Nat Papovich Senior Partner & Development Director Fusium, Inc. 503-226-7099 ---------------------------------------------------------- You are subscribed to cfcdev. To unsubscribe, send an email to [EMAIL PROTECTED] with the words 'unsubscribe cfcdev' in the message of the email. CFCDev is run by CFCZone (www.cfczone.org) and supported by Mindtool, Corporation (www.mindtool.com). An archive of the CFCDev list is available at www.mail-archive.com/[EMAIL PROTECTED] ---------------------------------------------------------- You are subscribed to cfcdev. To unsubscribe, send an email to [EMAIL PROTECTED] with the words 'unsubscribe cfcdev' in the message of the email. CFCDev is run by CFCZone (www.cfczone.org) and supported by Mindtool, Corporation (www.mindtool.com). An archive of the CFCDev list is available at www.mail-archive.com/[EMAIL PROTECTED]