All geek questions in one place

WCF, self-signed certificates for encryption

I want to create WCF services using aspnet membership to authorize the user. However, if I need a certificate for encryption purposes only, does it matter if it is a self-signed certificate or do you need to buy a certificate from a supplier?

+3
source share
2 answers

You can use self-signed certificates, but the problem is that you need to install a certificate on each machine that will use the certificate for encryption.

If you have a large number of machines on which clients will work, this can easily become prohibitive in terms of service and configuration, and this easily justifies the purchase of a certificate from an authority.

+2
source

A self-signed certificate, regardless of whether you authenticate a user, carries the same risks. Best practice is to use a real certificate in a production environment. With some very cheap prices these days, this is not a big part of the financial burden to take on more (unless you are a fan of Verisign).

It was discussed and noted that self-signed certificates in the WCF production environment also have serious performance issues:

+3

Source: https://habr.com/ru/post/1733580/

More articles:


All Articles