Click here to Skip to main content
14,733,889 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
See more:
WCF provides two security mode namely
Message and Transport
what is the exact difference between them?
how will we deside which security mode to use and when?
Posted

Transport level security happens at the channel level. Transport level security is the easiest to implement as it happens at the communication level. WCF uses transport protocols like TCP, HTTP, MSMQ etc and every of these protocols have their own security mechanisms.

Message level security is implemented with message data itself. Due to this it is independent of the protocol. Some of the common ways of implementing message level security is by encrypting data using some standard encryption algorithm.

Hope, it clears your question.
   
Comments
Sam Anthwal 23-Dec-11 1:43am
   
what is the best mode to implement security shall we use Transport level security or message level security?
please suggest some scenarios.
Itz based on business scenario. If you secured entire in/out flow network, transport is preferable. Example of high sensitive financial service app. If you need few specific object to be covered,the message is fine.
   
Comments
Sam Anthwal 25-Dec-11 23:57pm
   
Thanks Ganesan

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)




CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900