Be Aware That basicHttpBinding Will Not Protect Sensitive Data by Default

- J.D. Meier, Carlos Farre, Jason Taylor, Prashant Bansode, Steve Gregersen, Madhu Sundararajan, Rob Boucher

If you use basicHttpBinding, be aware that message security and transport security are turned off by default. All of the bindings, except for basicHttpBinding, have either message or transport security turned on by default. If you want to secure your WCF messages on the network, you will need to explicitly turn on either message or transport security for the basicHttpBinding.

Additional Resources

Last edited Jun 12, 2008 at 11:37 PM by prashantbansode, version 1

Comments

No comments yet.