Is Transport security a bad practice for the WCF service over the Internet?
Posted
by Sergey
on Stack Overflow
See other posts from Stack Overflow
or by Sergey
Published on 2010-06-03T12:58:50Z
Indexed on
2010/06/03
13:14 UTC
Read the original article
Hit count: 396
Hello,
I have a WCF service accessible over the Internet. It has wsHttpBinding binding and message security mode with username credentials to authenticate clients. The msdn says that we should use message security for the Internet scenarios, because it provides end-to-end security instead of point-to-point security as Transport security has.
What if i use transport security for the wcf service over the Internet? Is it a bad practice? Could my data be seen by malicious users?
Thanks,
Sergey
© Stack Overflow or respective owner
