Silverlight 3 中隔离存储的使用是否存在安全问题
我在我的网站上使用 Silverlight 3。我有一个用于基于角色的身份验证的登录页面，它将具有不同权限的用户路由到网站的不同部分。我想使用类似于标准 ASP.Net 应用程序中可用的会话变量的东西。
我打算使用隔离存储来实现这一点。但我对此选项的安全性持怀疑态度，因为隔离存储存在于客户端，并且可以在客户端进行操作。我是独立存储概念的新手，不知道它在加密和服务器端验证等方面提供的安全选项。如果你们中有人使用过它或知道在这种情况下提供了安全性，请您解释一下这一点。
谢谢
I am using Silverlight 3 on my website. I have a Login Page for role based authentication, that routes users with different privileges to different parts of the website. I want to use something analogous to the Session Variables available in standard ASP.Net applications.
I intend to use Isolated Storage to achieve this. But I am skeptical about security in this option, as the Isolated Storage exists on the client side, and can be manipulated on client side. I am new to the Isolated Storage concept and don't know about the security options provided by it in terms of Encryption and server-side validation etc. If any of you have used it or are aware of the security provided in this case, could you please shed some light on the same.
Thanks
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
这是一个想法，为什么不只使用字典的静态实例（用一个简单的例子）。正如您提到的，silverlight在客户端运行，这意味着您不必关心其他用户的状态。只要用户正在使用 silverlight 应用程序，字典就会被持久化，并且每次再次访问该页面时，都会重新创建 AppDomain，这类似于用户重新初始化一个空的会话状态包
Here's an idea, why not just use a static instance of a dictionary (to go with a simple example). As you mentioned, silverlight runs on the client side, which means that you don't have to be concerned with other user's state. The dictionary will be persisted as long as the user is using the silverlight app, And every time you go to the page again, the AppDomain will be recreated which is analogous to the user having an empty session state bag re-initialized
查看实现独立存储数据库的 Silverlight Database 项目。该功能包括压缩和加密。
Have a look at the Silverlight Database project which implements an Isolated Storage database. The functionality includes compression and encryption.