Hi,
I have a service setup that uses the following binding.
<
bindings><
wsHttpBinding><
binding name="NewBinding"><
security mode="TransportWithMessageCredential"><
message negotiateServiceCredential="false" /></
security></
binding></
wsHttpBinding></
bindings>Now when this service runs the contents of the soap message are signed. I was just wondering if it is possible to just send the Kerberos token for Message authentication and not worry about signing and encryption.

wsHttpBinding Message Security
Harsimrat
In this mode, the only things that should be signed at the SOAP layer are the wsa:To header and the wsu:Timestamp. We need to sign something at the SOAP layer in order to cryptographically bind the kerberos token to the message.
Gudge