Reputation: 1627
I am consuming a WCF web service which has an endpoint protocol https
. Does this mean I need a client certificate to authenticate?
I haven't been given a certificate to use but rather a Username and Password which as I understand it you also need to authenticate but at message level?
Any insight would be helpful.
Upvotes: 0
Views: 170
Reputation: 825
No you won't need a certificate.
By giving you a usernamne and password they are allowing you to connect using HTTP Basic Authentication. Using the HTTPS protocol is preferred when using HTTP Basic Authentication as the credentials is encrypted instead of just base64 encoded when using normal HTTP protocol.
The username and password will be sent with each request in the Authorization header.
Here is the MSDN article explaining Basic Auth and C# code examples.
This Wikipedia entry also gives a pretty good simple explanation of HTTP Basic Auth
Upvotes: 2