You must configure the service to use HTTPS:
<bindings> <basicHttpBinding> <binding name="https"> <security mode="Transport" /> </binding> </basicHttpBinding> </bindings> <behaviors> <serviceBehaviors> <behavior name="metadata"> <serviceMetadata httpsGetEnabled="true" /> </behavior> </serviceBehaviors> </behaviors> <services> <service name="..." behaviorConfiguration="metadata"> <endpoint address="..." contract="..." binding="basicHttpBinding" bindingConfiguration="https" /> </service> </services>
This will only allow your service to be called over HTTPS, because there is no unsecured endpoint. WSDL will also be available only through HTTPS, as HTTP GET is not enabled.
Ladislav Mrnka
source share