how to create secure web service using wcf service

Posted by Venky.Net under WCF on 9/3/2013 | Points: 10 | Views : 2038 | Status : [Member] | Replies : 2

Write New Post |

Search Forums | Answered

Resolved Posts |

Un Answered Posts |

Forums Home

hi

i am recendly attend for interview for software developer posting.they technical person asked me how to give secure wcf service,so please post your answer guys

Reply | Reply with Attachment

Alert Moderator

Responses

Posted by: Bandi on: 9/3/2013 [Member] [MVP] Platinum | Points: 25

0	By using IPFilter - Allow/Deny Access by IP Address You can protect WCF web service.. The explanation is as follows: http://www.codeproject.com/Articles/37280/WCF-Service-Behavior-Example-IPFilter-Allow-Deny-A Refer these links.... http://msdn.microsoft.com/en-us/library/ff650794.aspx http://wcfsecurityguide.codeplex.com/ http://programmers.stackexchange.com/questions/17310/how-do-you-protect-your-wcf-service Mark This Response as Answer -- Chandu http://www.dotnetfunda.com/images/dnfmvp.gif Venky.Net, if this helps please login to Mark As Answer. \| Alert Moderator

By using IPFilter - Allow/Deny Access by IP Address You can protect WCF web service.. The explanation is as follows:
http://www.codeproject.com/Articles/37280/WCF-Service-Behavior-Example-IPFilter-Allow-Deny-A

Refer these links....
http://msdn.microsoft.com/en-us/library/ff650794.aspx
http://wcfsecurityguide.codeplex.com/
http://programmers.stackexchange.com/questions/17310/how-do-you-protect-your-wcf-service

Mark This Response as Answer
--
Chandu
http://www.dotnetfunda.com/images/dnfmvp.gif

Venky.Net, if this helps please login to Mark As Answer. | Alert Moderator

Posted by: Allemahesh on: 9/3/2013 [Member] [MVP] Silver | Points: 25

0	Dear Venky, One option can be you authenticate clients using a username/password and protect the connection using ssl. This is good if the connection is over the internet. Another is You can use Message-based security without SSL. Message based security secures your messages prior to sending them to the transport channel. So you can send secured messages over HTTP. Link : http://codebetter.com/petervanooijen/2010/04/09/a-simple-wcf-service-with-username-password-authentication-the-things-you-told-me/ Happy Coding. Venky.Net, if this helps please login to Mark As Answer. \| Alert Moderator

Dear Venky,

One option can be you authenticate clients using a username/password and protect the connection using ssl. This is good if the connection is over the internet.
Another is You can use Message-based security without SSL. Message based security secures your messages prior to sending them to the transport channel. So you can send secured messages over HTTP.

Link : http://codebetter.com/petervanooijen/2010/04/09/a-simple-wcf-service-with-username-password-authentication-the-things-you-told-me/

Happy Coding.

Venky.Net, if this helps please login to Mark As Answer. | Alert Moderator

Latest Posts