WCF響應沒有簽名或加密

我主持一個WCF服務，我得到的請求，可以unsigned和uncrypted它沒有custombindings的問題，但爲什麼我的迴應不會自動siped和加密？任何一個幫助？WCF響應沒有簽名或加密

<customBinding> 
    <binding name="DutyTravelSOAP12Binding"> 
     <transactionFlow transactionProtocol="WSAtomicTransaction11"/> 
     <textMessageEncoding maxReadPoolSize="64" maxWritePoolSize="16" 
      messageVersion="Soap11" writeEncoding="utf-8"> 
     <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384" 
      maxBytesPerRead="4096" maxNameTableCharCount="16384" /> 
     </textMessageEncoding> 
     <security defaultAlgorithmSuite="Basic128Rsa15" allowSerializedSigningTokenOnReply="true" 
      enableUnsecuredResponse="true" authenticationMode="MutualCertificate" 
      requireDerivedKeys="false" securityHeaderLayout="Lax" includeTimestamp="False" 
      keyEntropyMode="CombinedEntropy" messageProtectionOrder="SignBeforeEncrypt" 
      messageSecurityVersion="WSSecurity10WSTrustFebruary2005WSSecureConversationFebruary2005WSSecurityPolicy11BasicSecurityProfile10" 
      allowInsecureTransport="false"> 
     <localClientSettings detectReplays="false" maxClockSkew="00:25:00" 
      replayWindow="00:25:00" sessionKeyRolloverInterval="00:25:00" 
      timestampValidityDuration="00:25:00" /> 
     <localServiceSettings detectReplays="false" /> 
     <secureConversationBootstrap allowSerializedSigningTokenOnReply="true" requireDerivedKeys="true" 
      enableUnsecuredResponse="false" securityHeaderLayout="Lax" keyEntropyMode="CombinedEntropy" 
      includeTimestamp="False" allowInsecureTransport="false" 
      requireSignatureConfirmation="true" authenticationMode="MutualCertificate" 
      messageProtectionOrder="SignBeforeEncrypt" defaultAlgorithmSuite ="Basic128Rsa15" 
      messageSecurityVersion="WSSecurity10WSTrustFebruary2005WSSecureConversationFebruary2005WSSecurityPolicy11BasicSecurityProfile10"> 
      <localClientSettings detectReplays="true"/> 
      <localServiceSettings detectReplays="true"/> 
     </secureConversationBootstrap> 
     </security> 
     <httpTransport manualAddressing="false" maxBufferPoolSize="524288" 
     maxReceivedMessageSize="65536" allowCookies="false" authenticationScheme="Anonymous" 
     bypassProxyOnLocal="false" decompressionEnabled="true" hostNameComparisonMode="StrongWildcard" 
     keepAliveEnabled="true" maxBufferSize="65536" proxyAuthenticationScheme="Anonymous" 
     realm="" transferMode="Buffered" unsafeConnectionNtlmAuthentication="false" 
     useDefaultWebProxy="true"/> 
    </binding> 
    </customBinding>

這是我的自定義綁定

來源

2011-08-09 Ali Asger

我將開始與這個'enableUnsecuredResponse'設置爲'FALSE'。 –

完成，沒有幫助.. –

Btw。爲什麼你有這麼龐大的配置，其中一半的設置有默認值或完全沒有使用？您是如何發現響應不安全的？ –

的textMessageEncoding元素通常安全元素之後去...

來源

2011-08-09 15:15:09 JohnC

WCF響應沒有簽名或加密

回答

相關問題