是否有人在生产环境中使用WCF消息安全性? [英] Is anyone using WCF message security in a production environment?
问题描述
你好. 如果是，能否给我一些基本的配置详细信息，例如您正在使用哪种身份验证方法(即基本身份验证，证书，Windows身份验证)? style ="> 您发现邮件安全性能对传输安全性还是传输安全性是可以接受的吗?
Hello. I would like to know if any forum members are using WCF with message security in a production environment? If so, can you give me some basic configuration details, such as which authentication method are you using (i.e. basic, certificates, Windows authentication)? Do you find the message security performance hit vs. transport security to be acceptable?
感谢，史蒂夫
推荐答案
下面是消息安全配置的一个示例
Below is an exmple of the messsage security configurtion
< system.serviceModel>
< bindings>
< wsHttpBinding>
< binding name =" wsBindingConfiguration">
<安全模式=消息"/>
< message clientCredentialType ="Windows"/>
</binding>
</wsHttpBinding>
</bindings>
</system.serviceModel>
<system.serviceModel>
<bindings>
<wsHttpBinding>
<binding name="wsBindingConfiguration">
<security mode="Message"/>
<message clientCredentialType="Windows"/>
</binding>
</wsHttpBinding>
</bindings>
</system.serviceModel>
与对每条消息进行签名和加密相比，传输相比，在邮件安全性方面存在性能上的下降.但是，如果您对此有所担心，则可以对您的消息进行部分签名以获得性能.但是，这种性能下降是可以克服的 进行了一些硬件改进.因此，这可以忽略不计.就我们而言，安全比真正的边际性能损失更重要，因为我们需要仅由消息安全性提供的端到端消息传输安全性.运输安全是最好的 适用于点对点，特别是在Intranet中.
There is a performance hit in Message security compare to transport as each of the message is signed and encrypted. However, if you are concerned about this you can partially sign you message to gain the performance. But, this performance hit can be overcome with some hardware improvement. So this will be negligible. On our case, security is more important than really marginal performance loss, as we need end-to-end message transmission security which only provided by message security. Transport security is best suited for Point-to-point and specially within intranet.
HTH
注意:没意识到帖子是那么旧的.希望将来还会有其他人:P
Note: Didnt realize the post was that old. Hope it would still someone else in future :P
这篇关于是否有人在生产环境中使用WCF消息安全性?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
