29 March 2014

Transport Security Protection Level -- WCF Security

This article explains about the how to configure the service with Transport security settings and what are the protection level available.When configure transfer security for Transport security, not all bindings support all client credential type

Below table list client credential for different binding

Name
None
Windows
Username
Certificate
BasicHttpBinding
Yes(default)
Yes
Yes
Yes
NetTcpBinding
Yes
Yes(default)
No
Yes
NetNamedPipeBinding
No
Yes(default)
No
No
WsHttpBinding
Yes
Yes(default)
Yes
Yes
WsDualHttpBinding
N/A
N/A
N/A
N/A
NetMsmqHttpBinding
Yes
Yes(default)
No
Yes
  
Below diagram explain about how set the client credential in configuration file

 

None: Message does not get protected while transfer from client and service

Signed: this protection level makes sure that message is received from authenticated user, but it message can be tampered by any third party.

Encrypted and Signed: This level makes sure that message is received from authenticated user and it also encrypts the message


No comments:

Post a Comment