WCFSecurityGuide Work Item Rss Feed

Commented Issue: Minor Typo on page 32 in definition of Windows Transport Security

tofuller — Fri, 21 Nov 2008 14:31:06 GMT

The last sentence for the definition of Windows transport security states: "The Service is authenticated using the Windows credentials of the process identity or an SSL certificate if you are using the http protocol." Shouldn't the protocol be HTTPS?
Comments: ** Comment from web user: tofuller **

Quick correction. I was looking at an old version. This is actually on page 34 but the same issue still seems to be there. It says the SSL certificate is used for HTTP instead of HTTPS.

Created Issue: Minor Typo on page 32 in definition of Windows Transport Security

tofuller — Fri, 21 Nov 2008 14:26:23 GMT

Created Issue: Message security in netNamedPipeBinding

paulorenato_n — Thu, 14 Aug 2008 16:32:22 GMT

This item may be related to work item #2004.

In page 129 (Chapter 02, Threats and Countermeasures for Web Services) the sentence "{Transport security} is available on all of the bindings except for netNamedPipeBinding." is apparently wrong.

Shouldn't it be {Message Security}?

Thanks,

Paulo

Commented Issue: Typo in Chapter 1 – Security Fundamentals for Web Services

rboucher — Tue, 12 Aug 2008 01:04:36 GMT

"SOA Tenants
You can further define the SOA attributes ..."

should read

"SOA Tenets
You can further define the SOA attributes ..."
Comments: ** Comment from web user: rboucher **

Nope. Still there. checking into it. Will correct in version 1.01 bug fix version of guide in future as appropriate.

Commented Issue: Config Error in Chapter 10 - Intranet – Web to Remote WCF Using Transport Security (Trusted Subsystem, HTTP)?

rboucher — Tue, 12 Aug 2008 00:59:28 GMT

page 159, Chapter 10 - Intranet – Web to Remote WCF Using Transport
Security (Trusted Subsystem, HTTP) at the bottom it says The IIS virtual directory is configured to use Anonymous
access.

I'm pretty sure this is backwards?? The IIS on the application server *needs* Windows Authentication, and not allow Anonymous (or maybe it needs both?)
Comments: ** Comment from web user: rboucher **

Thanks. Well take a look and I'll post results here.

Commented Issue: Cut and paste errors in section on Message Security in WCF

rboucher — Tue, 12 Aug 2008 00:58:48 GMT

On page 189 of v1, under the heading Message Security in WCF, there are several places where the text "transport security" appears in a context where "message security" is intended.
Comments: ** Comment from web user: rboucher **

Thanks. Well take a look, correct and slipstream a corrected build.

Created Issue: Cut and paste errors in section on Message Security in WCF

ChrisDickson — Wed, 06 Aug 2008 16:34:05 GMT

On page 189 of v1, under the heading Message Security in WCF, there are several places where the text "transport security" appears in a context where "message security" is intended.

Created Issue: Config Error in Chapter 10 - Intranet – Web to Remote WCF Using Transport Security (Trusted Subsystem, HTTP)?

flank42 — Tue, 05 Aug 2008 12:55:58 GMT

Closed Issue: Text doesn't appear on Mac

rboucher — Tue, 08 Jul 2008 01:30:07 GMT

The PDF works fine on Mac except that it is impossible to read the content... It seems that a font is missing (maybe you are using a System font on Windows).
Comments: Should be fixed in beta2. Don't have a Mac here to verify, but very likely do to removal of faonts from PDF for size reasons.

Closed Issue: Document does not contain page numbers

rboucher — Tue, 08 Jul 2008 01:29:27 GMT

There are no page numbers in the table of contents (pages 8 - 10) or on the pages themselves.
Comments: Fixed in BETA2

Closed Issue: Link to "Web Services Security" guide yields 404

rboucher — Tue, 08 Jul 2008 01:29:26 GMT

Under the "Patterns" section on page 17, the link to the "Web Services Security" guide brings you to Page Not Found (404 error):
http://msdn.microsoft.com/en‐us/library/aa480545.aspx
Comments: Fixed in BETA2

Commented Issue: Typo in Chapter 1 – Security Fundamentals for Web Services

rboucher — Mon, 30 Jun 2008 21:48:33 GMT

"SOA Tenants
You can further define the SOA attributes ..."

should read

"SOA Tenets
You can further define the SOA attributes ..."
Comments: ** Comment from web user: rboucher **

Should be fixed now. First version of the guide didn't have a full edit pass.

Commented Issue: Document does not contain page numbers

rboucher — Mon, 30 Jun 2008 21:47:50 GMT

There are no page numbers in the table of contents (pages 8 - 10) or on the pages themselves.
Comments: ** Comment from web user: rboucher **

You should try BETA2 guide up now. We've added pages numbers to the guide page. We didn't intend to add them to the table of contents, instead relying on the bookmarks to bring you to the proper pages. But I'm guessing that you intend to print out the guide in its entirety and hence the request. Any one else please vote on this item if page numbers are important in the table of contents.

Commented Issue: Link to "Web Services Security" guide yields 404

rboucher — Mon, 30 Jun 2008 21:45:04 GMT

You should try BETA2 guide up now. This issue should be fixed now

Commented Issue: Link to "Web Services Security" guide yields 404

rboucher — Mon, 30 Jun 2008 21:44:30 GMT

You should try BETA2 guide up now. This issue should be fixed.

Commented Issue: Link to "Web Services Security" guide yields 404

rboucher — Mon, 30 Jun 2008 21:43:53 GMT

You should try BETA2 guide up now. This issue should be fixed.

Commented Issue: Text doesn't appear on Mac

rboucher — Mon, 30 Jun 2008 21:43:18 GMT

The PDF works fine on Mac except that it is impossible to read the content... It seems that a font is missing (maybe you are using a System font on Windows).
Comments: ** Comment from web user: rboucher **

You should try BETA2 guide up now. This issue should be fixed.

Created Issue: Typo in Chapter 1 – Security Fundamentals for Web Services

lizardb0y — Tue, 24 Jun 2008 23:14:23 GMT

"SOA Tenants
You can further define the SOA attributes ..."

should read

"SOA Tenets
You can further define the SOA attributes ..."

Commented Issue: Link to "Web Services Security" guide yields 404

rboucher — Tue, 24 Jun 2008 01:04:01 GMT

This is due to a bed en-hypen in the guide. Looks almost the same.

http://msdn.microsoft.com/en-us/library/aa480545.aspx (correct)

http://msdn.microsoft.com/en‐us/library/aa480545.aspx (bad)

Will be fixed in the next version of the guide.

Commented Issue: Document does not contain page numbers

rboucher — Tue, 24 Jun 2008 00:46:53 GMT

There are no page numbers in the table of contents (pages 8 - 10) or on the pages themselves.
Comments: ** Comment from web user: rboucher **

We will include page numbers in this next build, due out this week sometime.