Friday, July 09, 2010

WCF Security Articles

Configuring WCF for client certificate authentication - Carlo Folini
http://blogs.ugidotnet.org/cfolini/archive/2008/01/04/90561.aspx

WCF over HTTPS - Christophe Geers
http://cgeers.wordpress.com/2009/08/07/wcf-over-https/

  • Transport Security(basic)/HTTPS
  • UserNamePasswordValidator
  • ServerCertificateValidationCallback
9 simple steps to enable X.509 certificates on WCF - CodeProject
http://www.codeproject.com/KB/WCF/9StepsWCF.aspx?display=Print
  • Message Security(Certificate)/PeerTrust
Securing WCF Services with Certificates.- CodeProject
http://www.codeproject.com/KB/WCF/wcf_certificates.aspx
  • Message Security(Certificate)/ChainTrust
How To Configure WCF Security Using Only X.509 Certificates - CodeProject
http://www.codeproject.com/KB/webservices/WCFx509Security.aspx
  • TransportWithMessageCredential
  • Transport Security(Certificate)
  • Message Security(Certificate)
WCF certificate authentication under Windows Vista - Windows Live
http://romualdas.spaces.live.com/blog/cns!DCDC5E439E70339D!1006.entry?sa=894596551

  • Transport Security(Certificate)
  • PeerOrChainTrust/mapClientCertificateToWindowsAccount
Use Transport Security and Message Credentials – MSDN
http://msdn.microsoft.com/en-us/library/ms789011.aspx
  • WSHttpBinding + Transport Security (Code/Config)
  • NetTcpBinding + Transport Security (Code/Config)
WCF – 2 Way SSL Security using Certificates - Imaya's Blog
http://blogs.msdn.com/b/imayak/archive/2008/09/12/wcf-2-way-ssl-security-using-certificates.aspx

  • Transport Security (Certificate)
Thoughts on BasicHttpBinding, Security and SSL - Sajay MSDN Blogs
http://blogs.msdn.com/b/sajay/archive/2007/01/05/thoughts-on-basichttpbinding-security-and-ssl.aspx

  • BasicHttpBinding
  • UserNamePasswordValidator
  • TransportWithMessageCredential
Programming WCF Security - MSDN
http://msdn.microsoft.com/en-us/library/ms731925.aspx

Improving Web Services Security Guide - patterns & practices
http://wcfsecurityguide.codeplex.com


http://msdn.microsoft.com/en-us/library/ff648360.aspx
  • wsHttpBinding
  • Message Security
  • Certificates
Certificate Authentication – MSDN Forum
http://social.msdn.microsoft.com/forums/en-US/wcf/thread/4e12a513-ba7f-485d-93a7-2f093f1ccd8d

Misc
http://webservices20.blogspot.com/
http://wcfsecurity.codeplex.com/wikipage?title=How%20Tos
http://www.grimes.demon.co.uk/workshops/secWSThirteen.htm

[.NET 1.1] How to send a client certificate by using the HttpWebRequest and HttpWebResponse classes in Microsoft Visual C# .NET
http://support.microsoft.com/kb/895971
SSL & Client Certificates
http://stackoverflow.com/questions/3107625/ssl-works-without-client-certificate
message security in WCF
http://social.msdn.microsoft.com/Forums/en/wcf/thread/78e45a28-1c56-427b-a776-6e22f5cf2c19
WCF Interoperability
http://www.schnieds.com/2008/08/multiple-wcf-endpoints-net-20-clients.html
http://devlicio.us/blogs/ziemowit_skowronski/archive/2007/07/18/interoperability-between-wcf-and-wse-3-0.aspx
http://msdn.microsoft.com/en-us/library/ff648129.aspx
Working with Certificates
http://msdn.microsoft.com/en-us/library/ms731899.aspx
How to: Secure a Service with an X.509 Certificate
http://msdn.microsoft.com/en-us/library/ms788968.aspx
Securing Services and Clients
http://msdn.microsoft.com/en-us/library/ms734736.aspx

Message Security in WCF
http://msdn.microsoft.com/en-us/library/ms733137.aspx

Transport Security Overview
http://msdn.microsoft.com/en-us/library/ms729700.aspx

http://www.microsoft.com/learning/en/us/Exam.aspx?ID=70-513&Locale=en-us#tab1


Best Practices for Security in WCF – MSDN ***
http://msdn.microsoft.com/en-us/library/ms731059.aspx

1 comment:

Oracle said...

Good collection on security.
Thank you.