.net - What is the best way to secure a WCF service? -
what best way secure wcf service? should add header service calls , have message inspector on client verifies header?
i need make sure person provides correct user name , password use service , encrypted. on internet , using http binding.
if limited http take performance hit more portable.
think can encrypt , secure of http ws-security.
transport , message security modes
two main mechanisms used implement transfer security in wcf:
transport security mode , message security mode.
transport security mode uses transport-level protocol, such https, achieve transfer security. transport mode has advantage of being adopted, available on many platforms, , less computationally complex. however, has disadvantage of securing messages point-to-point.
message security mode, on other hand, uses ws-security (and other specifications) implement transfer security. because message security applied directly soap messages , contained inside soap envelopes, application data, has advantage of being transport protocol-independent, more extensible, , ensuring end-to-end security (versus point-to-point); has disadvantage of being several times slower transport security mode because has deal xml nature of soap messages.
Comments
Post a Comment