I have a WCF Service hosted on a server with Real IP but no domain name. Clients are .NET desktop applications.
I need to encrypt the data going back and force between the clients and the server.
How can I do that? I understand that Certificates required for the SSL connection need a domain name. is this accurate? What options do I have?
I have a WCF Service hosted on a server with Real IP but no
Share
If all your clients are .NET applications consider using NetTcpBinding which is secure by default. All message packets are signed and encrypted over TCP protocol.
You can also control protection level on message contracts providing granular control over specific headers or body elements.
You can use ProtectionLevel property.
Options are:
None,Sign, andEncryptAndSign.protection and is the default
behavior.
signed but not encrypted
WCF gives you rich security features, for more details check Windows Communication Foundation Security