How to provide a secure WCF service?

Question

I was dealing with web services and we provided it with a soap credential header. The calling application will need to enter a username and password in the credential header. We are now exploring the use of a WCF-based web service and want to protect it. I wonder what is the best way to protect him?

I thought I could use the username and password in the POST variables (this is what they are called). But is this really a way to provide a calm web service?

Answer 1

This link describes the use of WCF with WS-Security .
This link describes what WS-Security means .
This link describes the architecture of the WCF security component .
Not sure you can combine them with the REST, but you know that HTTP has its own authentication mechanisms (see. Basic Authentication and Authentication Digset and the review of all ).
A RESTful way to do this imo is to use HTTP authentication.
I think you need to do some research :)