Ryan Searle
Ryan Searle

Reputation: 1627

WCF Service endpoint address uses https, does that mean the transport level authentication is Certificate?

I am consuming a WCF web service which has an endpoint protocol https. Does this mean I need a client certificate to authenticate?

I haven't been given a certificate to use but rather a Username and Password which as I understand it you also need to authenticate but at message level?

Any insight would be helpful.

Upvotes: 0

Views: 170

Answers (1)

J2D8T
J2D8T

Reputation: 825

No you won't need a certificate.

By giving you a usernamne and password they are allowing you to connect using HTTP Basic Authentication. Using the HTTPS protocol is preferred when using HTTP Basic Authentication as the credentials is encrypted instead of just base64 encoded when using normal HTTP protocol.

The username and password will be sent with each request in the Authorization header.

Here is the MSDN article explaining Basic Auth and C# code examples.

This Wikipedia entry also gives a pretty good simple explanation of HTTP Basic Auth

Upvotes: 2

Related Questions