WCF username without certificate

Question

I\'m working on a project where I need the following.

• WCF service on the server side (.NET 3.5)
• WPF client for the client side (.NET 3.0)

Answer 1

I don't know the details of your network infrastructure, but if you are in a Windows domain, you should consider using Windows credentials.

It is possible to use a Message security without certificates if you use Windows credentials. This is the default behavior of the wsHttpBinding (out of the box).

Using the out-of-the-box solutions (without implementing your own binding) WCF encourage (requires) you to use a secure channel whenever authentication credentials are included in the messages.

Using a custom binding that allows you to specify credentials in clear text is surely a solution, but I would think twice before using it.