0

I have a WCF service. For security reasons I want to encrypt the messages sent to and from the service.

The service is deployed on a server with a certificate so I could use basic http binding with HTTPS. However previously I have used WS-Binding using the encoded value property with a value generated from the certificate used on the server.

Is there a security benefit in ws binding with encoded value. If basic http binding is used with https would that not deliver the same level of protection?

AJM
  • 32,054
  • 48
  • 155
  • 243
  • http://stackoverflow.com/questions/10172744/ws-binding-with-encoded-value-vs-basic-http-binding-over-https – AJM Apr 16 '12 at 11:06
  • http://stackoverflow.com/questions/3591342/how-to-prevent-a-man-in-the-middle-attack-in-case-of-a-compromised-server – AJM Apr 16 '12 at 11:06
  • Check [this](http://stackoverflow.com/questions/5673283/wcf-transport-vs-message/5673867#5673867), maybe it gives you some answer. – Ladislav Mrnka Apr 17 '12 at 08:56

0 Answers0