Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am currently evaluating whether MSMQ is going to be suitable for use in an application that is sold to large companies. MSMQ will be used to send messages between multiple processes on the same machine, with the possibility of these separate processes being put onto separate machines later on.

As part of this evaluation, I need to consider the security implications of deploying and using MSMQ as part of our application, and what restrictions this may put on us (eg. by having the IT departments at those large companies not allow MSMQ for security reasons). As I'm just evaluating MSMQ, I don't know much about its set-up.

What would worry you about installing an application inside your company that uses MSMQ?

share|improve this question
add comment

1 Answer

There are no security reasons for not having MSMQ in a large company's IT infrastructure.

Do you want to make MSMQ secure? If so then use certificates to encrypt messages on the wire and authenticate user accounts. Don't use Windows security as SIDs can easily be spoofed in a message. Useful for resisting DOS attacks. You can also use SSL to send messages over HTTPS.

If instead you are looking at reliability and stability then this blog post should help: Insufficient Resources? Run away, run away!

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.