Question

I’ve asked a similar question here:

How to enforce one method in WCF Rest to be called via https, while others can be called over http

And it doesn’t look like it is possible on the code side. Is it possible to set up an entire service to be callable over HTTPS only? I’ve configured a service using the following binding:

  <webHttpBinding>
    <binding name="webBinding"
     maxBufferSize="152428800" maxReceivedMessageSize="152428800"
     receiveTimeout="00:10:00">
        <readerQuotas maxStringContentLength="152428800"
              maxArrayLength="152428800"
              maxBytesPerRead="4096"/>
        <security mode="Transport">
        <transport clientCredentialType="None" />
        </security>
    </binding>
    </webHttpBinding>

But when I try to call a simple service over http, the service returns the result happily, rather than returning some sort of exception. Do I need to configure IIS to only service https requests? Has anyone tried this?

Thanks!

Answer 1

Did you configure IIS to require SSL on your application’s folder? (you can set it to allow ssl or make it mandatory)