authentication and authorisation in wcf for creating a web api

Question

I am looking for ways to secure my wcf service. I have read about message security and transport security.But i am not sure which one to use in my scenario. I want to create a public faced api and in future i want to convert this in Rest api. What are the general ways to create and secure an web api with wcf

Thanks

Answer 1

Check the Application Scenarios section on the CodePlex WCF Security site , it provides great checklists for a number of different security configurations. The Guidelines section may also be useful. I found the site invaluable when looking at the various different options.