WCF Misconfiguration: Security Not Enabled

发布时间:2017-1-19 8:15:03 编辑:www.fx114.net 分享查询网我要评论
本篇文章主要介绍了"WCF Misconfiguration: Security Not Enabled",主要涉及到WCF Misconfiguration: Security Not Enabled方面的内容,对于WCF Misconfiguration: Security Not Enabled感兴趣的同学可以参考一下。

Abstract:

No transport or message security has been defined.

Explanation:

Applications that transmit messages without transport or message security cannot guarantee the integrity or confidentiality of the

messages. When a WCF security binding is set to None, both transport and message security are disabled.

The following configuration sets the security mode to None.

<system.serviceModel>

<bindings>

<wsHttpBinding>

<binding name="MyBinding">

<security mode="None"/>

</binding>

</bindings>

</system.serviceModel>

Recommendations:

Use transport and message security to protect the integrity and confidentiality of messages.

The configuration below tells the service to use transport security with message credentials.

<system.serviceModel>

<bindings>

<wsHttpBinding>

<binding name="MyBinding">

<security mode="TransportWithMessageCredential"/>

<message clientCredentialType="Windows"/>

</binding>

</bindings>

</system.serviceModel>

上一篇:js 两个滚动事件相互影响
下一篇:Docker 版本gitlab-runner支持maven3(Ubuntu)

相关文章

相关评论