传输层的TransporWithMessageCredentials消息加密 [英] TransporWithMessageCredentials message encryption at the Transport layer

问题描述

我的理解是，在使用TransporWithMessageCredentials绑定时，在传输层对邮件进行了加密，以提供完整性和机密性.

Hi, My understanding is messages are encrypted at the Transport layer to provide Integrity and confidentiality when using TransporWithMessageCredentials binding.

安全 传输(例如HTTPS)可提供完整性，机密性， and  在SOAP时进行身份验证 消息 安全性提供了 客户端身份验证. strong>

A secure transport (for example, HTTPS) provides integrity, confidentiality, and authentication while SOAP message security provides client authentication.

当我打开WCF消息日志记录时，我在< g class ="gr_gr_423 gr-alert gr_gramm gr_inline_cards gr_run_anim语法仅del-del replaceWithoutSep"中以纯文本形式看到消息. data-gr-id ＝"423". id ="423"> a messages.svclog .//g 

When I turn on the WCF message logging, I see the messages in a plain text in <g class="gr_ gr_423 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar only-del replaceWithoutSep" data-gr-id="423" id="423">a messages.svclog.</g> 

这是绑定信息

WCF服务的安全端口443已分配给IIS中的https协议.

WCF service has a secure port 443 assigned to the https protocol in IIS.

我需要做一些特殊的事情来加密在客户端和服务器之间发送的消息吗?我试图用ProtectionLevel EncryptAndSign装饰WCF方法，但是没有用.当我阅读更多内容时，看来我们不需要 应用此修饰，因为默认情况下带有传输层的WsHttpBinding提供消息的加密.我在这里正确吗?

Do I need to do anything special to encrypt the messages sent between client and server? I tried to decorate the WCF methods with the ProtectionLevel EncryptAndSign but it didn't work. As I was reading more, it looks like we don't need to apply this decoration because WsHttpBinding with Transport layer by default provides encryption of messages. Am I correct here?

谢谢

Jay Patel

Jay Patel

推荐答案

>>我是否需要做一些特殊的事情来加密客户端和服务器之间发送的消息?

>>Do I need to do anything special to encrypt the messages sent between client and server?

否，不需要采取加密措施.  是的，消息的加密是由传输实现的.

No, there is no need to act to encrypt.  And you are right, encryption of messages is implemented by Transport.

这篇关于传输层的TransporWithMessageCredentials消息加密的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！