<transport> of <webHttpBinding>

  • Article

Defines the transport-level security settings for a service endpoint configured to receive HTTP requests.

Schema Hierarchy

<system.serviceModel>
  <bindings>
    <wsHttpBinding>
      <binding>
        <security> of <webHttpBinding>
          <transport> of <webHttpBinding>

Syntax

<webHttpBinding>
    <binding>
        <security
        mode="None|Transport|Message|TransportWithMessageCredential|TransportCredentialOnly">
            <transport clientCredentialType="None|Basic|Digest|Ntlm|Windows"
             proxyCredentialType="None|Basic|Digest|Ntlm|Windows" realm="string" >
                <extendedProtectionPolicy
                     policyEnforcement="Never|WhenSupported|Always"
                     protectionScenario="TransportSelected|TrustedProxy">
                    <customServiceNames></customServiceNames>
                        </extendedProtectionPolicy>
            </transport>
        </security>
    </binding>
</WebHttpBinding>

HttpTransportSecurity

Attributes and Elements

The following sections describe attributes, child elements, and parent elements.

Attributes

Attribute Description

clientCredentialType

Specifies the credential used to authenticate the client to the service. This attribute is of type HttpClientCredentialType.

proxyCredentialType

Specifies the credential used to authenticate the client to a domain proxy. This attribute is of type HttpProxyCredentialType.

realm

A string that specifies the authentication realm for digest or basic authentication. The default is an empty string.

An authentication realm specifies at least the name of the host that performs the authentication. It can also specify a collection of users that has access. A user can query the authentication realm to ascertain which one of the several possible usernames and passwords can be used.

policyEnforcement

This enumeration specifies when the ExtendedProtectionPolicy should be enforced.

  1. Never – The policy is never enforced (Extended Protection is disabled).

  2. WhenSupported – The policy is enforced only if the client supports Extended Protection.

  3. Always – The policy is always enforced. Clients which don’t support Extended Protection will fail to authenticate.

Child Elements

None.

Parent Elements

Element Description

<security> of <webHttpBinding>

Represents the security capabilities of the <wsHttpBinding> element.

See Also

Reference

HttpTransportSecurity
Transport
Transport
HttpTransportSecurityElement

Concepts

<binding>

Other Resources

Securing Services and Clients
Windows Communication Foundation Bindings
Configuring System-Provided Bindings
Using Bindings to Configure Services and Clients
Web Programming Model