Geek asks and answers

WsHttpBinding message-level security without the use of certificates?

Is it possible to avoid using certificates with wsHttpBinding when using message-level security?

or is there any other way to encrypt messages between the client and the server without the need to interfere with certificate settings.

+3
source share
1 answer

If the client and server are in the same Windows domain, then yes (using Windows security) no. If you want to avoid using certificates, you must create your own solution, but as soon as you fully understand how encryption and signing are provided and what is conveyed in the certificates, you will find that you are trying to invent a wheel.

+3

More articles:


All Articles