wsHttpBinding Message Security

Hi,

I have a service setup that uses the following binding.

<bindings>

<wsHttpBinding>

<binding name="NewBinding">

<security mode="TransportWithMessageCredential">

<message negotiateServiceCredential="false" />

</security>

</binding>

</wsHttpBinding>

</bindings>

Now when this service runs the contents of the soap message are signed. I was just wondering if it is possible to just send the Kerberos token for Message authentication and not worry about signing and encryption.



Answer this question

wsHttpBinding Message Security

  • Harsimrat

    In this mode, the only things that should be signed at the SOAP layer are the wsa:To header and the wsu:Timestamp. We need to sign something at the SOAP layer in order to cryptographically bind the kerberos token to the message.

    Gudge


  • wsHttpBinding Message Security