3

I have some collegues who have build a WCF Service. Their security settings are the following:

security mode="None" transport clientCredentialType="Windows" proxyCredentialType="None" realm="" message clientCredentialType="Windows" negotiateServiceCredential="true" establishSecurityContext="true" security

Does it makes sense to specify the security mode="None" and then specify transport/message security underneath?

Improve this question
1

2 Answers 2

Reset to default
5

This is just basically NO SECURITY at all - that doesn't make any sense at all - except for maybe development time :-)

If you have <security mode="None"> then anything you specify below is not taken into account - you could leave that out just as well.

Improve this answer
Sign up to request clarification or add additional context in comments.

Comments

1

It does no harm, the mode="None" value means none of the individual settings for either message or transport will be used.

Improve this answer

Comments

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.