Reputation: 11454
Normally I have been using Secure | Signing | Sealing
flags to pull back a directory entry and search.
If I wanted to use SecureSocketsLayer instead, should I also specify any of those flags (Secure | Signing | Sealing
) with it, or does the SSL flag encompass full encryption/signing and can be used alone?
I have read http://msdn.microsoft.com/en-us/library/system.directoryservices.authenticationtypes.aspx but the description doesn't make it fully clear.
Upvotes: 2
Views: 1698
Reputation: 4503
SecureSocketsLayer requires a user cert - it's mutual auth, essentially. It's not the same as Secure | Signing | Sealing. This gets you Kerberos/NTLM authenticated and encrypted traffic. If you don't need mutual auth, I would leave it as-is, but, if you do, you can attach it as a fourth flag.
Upvotes: 2