<security> of <wsHttpBinding>

 

Represents the security capabilities of the <wsHttpBinding>.

<system.ServiceModel>
<bindings>
<wsHttpBinding>
<binding>
<security>

  
<security mode="Message/None/Transport/TransportWithMessageCredential">  
   <transport  
         clientCredentialType="Basic/Certificate/Digest/None/Ntlm/Windows"  
      proxyCredentialType="Basic/Digest/None/Ntlm/Windows"  
      realm="string"   
      defaultClientCredentialType="Basic/Certificate/Digest/None/Ntlm/Windows"  
      defaultProxyCredentialType="Basic/Digest/None/Ntlm/Windows"  
      defaultRealm="string" />  
   <message  
            clientCredentialType="Certificate/IssuedToken/None/UserName/Windows"  
      algorithmSuite="Basic128/Basic192/Basic256/Basic128Rsa15/Basic256Rsa15/TripleDes/TripleDesRsa15/Basic128Sha256/Basic192Sha256/TripleDesSha256/Basic128Sha256Rsa15/Basic192Sha256Rsa15/Basic256Sha256Rsa15/TripleDesSha256Rsa15"  
       establishSecurityContext="Boolean"   
      negotiateServiceCredential="Boolean"/>  
</security>  

The following sections describe attributes, child elements, and parent elements

Attributes

AttributeDescription
mode- Optional. Specifies the type of security that is applied. The default is Message.
- This attribute is of type SecurityMode.
ValueDescription
NoneSecurity is disabled.
TransportSecurity is provided using HTTPS. The service needs to be configured with SSL certificates. The message is entirely secured using HTTPS and is authenticated by the client using the service’s SSL certificate. The client authentication is controlled through the ClientCredentials attribute. of the <transport>.
MessageSecurity is provided using SOAP message security. By default, the SOAP body is Encrypted and Signed. This mode offers a variety of features, such as whether the service credentials are available at the client out of band, the algorithm suite to use, and what level of protection to apply to the message body through the Security.Message property. Client authentication is performed once per session and the results of authentication are cached for the duration of the session.
TransportWithMessageCredentialIn this mode, HTTPS provides integrity, confidentiality, and server authentication, and SOAP message security provides client authentication. By default, client authentication is performed once per session and the results of authentication are cached for the duration of the session.

Child Elements

ElementDescription
<transport>Defines the transport security settings. This element corresponds to the HttpTransportSecurityElement type.
<message>Defines the security settings for the message. This element corresponds to the MessageSecurityOverHttpElement type.

Parent Elements

ElementDescription
<wsHttpBinding>A secure binding for HTTP transport applications.

The WSHttpBinding class is designed for interoperation with services that implement WS-* specifications. The transport security for this binding is Secure Sockets Layer (SSL) over HTTP, or HTTPS.

WSHttpSecurity
Security
Security
WSHttpSecurityElement
Securing Services and Clients
Bindings
Configuring System-Provided Bindings
Using Bindings to Configure Windows Communication Foundation Services and Clients
<binding>

Show: