I am confused… How can MS release two versions of Silverlight without having proper support for WCF bindings? Should they not support wsHTTP binding at least? So the service can have proper Message-level security? (i.e. certificates etc…)
With a basicHTTP binding, looks like the only two options to secure the service are…
- HTTPS (but that does not cover authentication)
- Custom-implemented WS-Security on top of basicHTTP binding
Am I missing something?
I think BasicHttpBinding is the only binding that’s yet been enabled for Partial Trust (APTCA).