Hello,
I have an asmx web service and in it I have used "basic authentication" (over SSL). When I read the trace page "trace.axd", I found it appends all the "ServerVariables", and my "AUTH_PASSWORD" is displayed in clear text among those server variables.
I have a few users (each has own password). They all can view "trace.axd". Is there a way to prevent "trace.axd" from displaying ServerVariables or AUTH_PASSWORD?
Is there any other out-of-box authentication approach I can use for IIS (over internet) to better protect password?
Thanks.
...
Go to the complete details ...