SSL secure WCF message security service hosted on IIS

42 views Asked by At

I have a c# written WCF service published on IIS that uses Message Security with certificates. I am asked to also cover it by SSL, but as far as I know, it's not supported by WCF (combination of SSL - transport security with nonSSL - Message security). Is it possible to use UrlRewrite to enable this or is there any other way?

1

There are 1 answers

0
zdenok On

I've found out, that probably the only possibility is to use external reverse proxy to be able to additionally secure the communication by SSL. In reality it would not make the data much safer and it would slow down the processing. If someone has other idea/knowledge, please let me know and I will reconsider this answer.