I want to know if my understanding of wcf security is correct

  • I want to know if my understanding of wcf security is correct: To use a username as client credentials when using security modes: transport or message or transportwithmessagecredential, a service certificate is required.

  • I also want to know if I do this - I do not want to configure the service certificate, and I do not want to use Windows client credentials, is there a way to enable protection on wcf (using any binding)?

  • I know that using message security on a network based on a domain server uses Windows credentials by default. But in a non-domain (normal LAN setup), is there a way to enable security in WCF without a service certificate?

+4
source share
1 answer

The only right way to protect WCF is to use a certificate. There is no other way to secure mak4. But you do not need to buy a certificate that you can create yourself.

+1
source

Source: https://habr.com/ru/post/1483073/


All Articles