Geek Answers Handbook

How does WCF provide more security than ASMX web services?

I am new to WCF and I would like to know how WCF provides more security over ASMX web services?

And what commitment do we prefer when considering a piece of security?

How to choose the best binding, since there are many?

Thank you very much..

+4
source share
2 answers

This is a very broad question.

WCF provides much greater security by providing much more options and options out of the box: it not only supports transport security (using SSL and https to protect your link, such as ASMX), but also supports message encryption, and by default, messages are encrypted and digitally signed .

This MSDN Bindings and Security section can be a good starting point - it explains the various security-related functions of each binding. The topic "WCF Security Programming" is covered in more detail, and the final "single site" for WCF security is the WCF Security Guidance site on Codeplex , created and maintained by the Templates and Practices group at Microsoft.

As for choosing the right binding, I would recommend the flowchart of the solution that Yuval Low presents in his excellent book Programming WCF Services (for intermediate and advanced developers).

+1
source

Indeed, this is a very open question. It depends entirely on your requirements, and then you can choose the right binding that provides security.

For example, you need to switch to basicHttpBinding or wsHttpBinding if interoperability is your problem and you need to communicate with systems other than WCF. In some cases, your service may be on the same system. In this case, netNamedPipeBinding would be the most efficient option. netTcpBinding or netPeerTcpBinding may be the best options if you need to exchange data on multiple computers. And if the service needs support for disconnected or queued calls, netMsmqBinding or msmqIntegrationBinding will become candidates.

WCF Security FAQs http://www.codeproject.com/Articles/36732/WCF-FAQ-Part-3-10-security-related-FAQ

default binding http://www.topwcftutorials.net/2012/06/wcf-bindings-default-security.html

0
source

More articles:


All Articles