没有SSL的WCF身份验证

Question

Is there a way to setup authentication (ala "Basic Authentication") without actually setting up an SSL Certificate? I'd also like to do this in REST or regular SOAP WCF Services, preferably in REST, but would like to be able to mix the services. In other words, "I want to be able to send a regular old username and password just like in Basic Authentication but without the SSL." Is there a way to do this?

Answer 1

Use TransportCredentialOnly security mode. This post explains how to do it:

http://developers.de/blogs/damir_dobric/archive/2006/07/31/890.aspx .

Don't forget that you also have to enable basic authentication in IIS.