
Reconfigure your database to require a key file in addition to your master password. Protect your online credentials with KeePass before reading further. Implementing a few or all of these recommendations could drastically increase your password manager security. That article grew over time, so I decided to split the security hardening section into this standalone article, while also expanding upon it greatly. When this check fails, the server returns response code 403 (Forbidden).I previously wrote a guide on syncing the KeePass password manager between various devices and platforms. This guards against certain security attacks, including replay attacks. The storage services ensure that a request is no older than 15 minutes by the time it reaches the service. If both headers are specified on the request, the value of x-ms-date is used as the request’s time of creation. You can specify the timestamp either in the x-ms-date header, or in the standard HTTP/HTTPS Date header. So I set my clock back to the right time and the problem went away.Īll in all, this was my fault, I tried to fool the system and I got caught.Įverything boils down to the fact that the Authentication for the Windows Azure Storage Services accept request timestamps who’s date times that are within 15 minutes of the services’ current time.Īll authenticated requests must include the Coordinated Universal Time (UTC) timestamp for the request.
I fired up fiddler and got nothing more than I already knew… then it came to me, whenever http calls are made, the client sends a timestamp to the server and whenever the client and the server are out of sync, calls are often refused.
I checked the Windows Azure Service Dashboard to see if any services were down… I even check that my storage keys had not been regenerated. I logged into the Windows Azure Management Portal and saw that everything was as it should. I constantly got HTTP Status Code 403 Forbidden. Recently I tried to shift back the clock on my developer computer so that I could test a caching mechanism.Īfter setting the clock back one day, I was unable to connect to Windows Azure services like Blob Storage Service, Queue Storage Service and Table Storage Service. If your development computer isn’t set to the correct date / time and you are working with Windows Azure you might end up like this guy! I know I did!