CODEWITHSUNDEEP
c#wcfwcf-security
Lora
Lora

Reputation: 95

WCF authentication

if i am using HttpClientCredentialType.Basic as ClientCredentialType and i only need wcf authentication for security should i worry about certificates and https?

Upvotes: 3

Views: 190

Answers (2)

oleksii
oleksii

Reputation: 35925

HttpClientCredentialType.Basic means you send your user name and password virtually in plain text. You must never use it without transport level security if it is production code.

Upvotes: 2

Nathan
Nathan

Reputation: 6216

If you don't use transport security then the basic authentication can be sniffed.
So, it depends on how secure you need your app to be.

Upvotes: 6

Related Questions