I have several colleagues who created the WCF service. Their security settings are as follows:
security mode="None"
transport clientCredentialType="Windows" proxyCredentialType="None" realm=""
message clientCredentialType="Windows" negotiateServiceCredential="true"
establishSecurityContext="true"
security
Does it make sense to specify the security mode = "No" and then specify the transport / message security under it?
source
share