Collaborate Disseminate
I have managed to decrypt TLS 1.2 data using Wireshark on a connection from the browser to the WCF service, but cannot manage to do the same with the WCF client.
I’m not sure what is the difference, because in both cases the cipher suite s… Continue reading Wireshark decrypt TLS 1.2 from WCF client
In a .NET application, communication between client and service can be implemented using various different bindings, NetTcpBinding being one of them.
The class defines an attribute named Security, which, according to this article, default… Continue reading Why does Wireshark not recognize WCF traffic as TLS encrypted?
We wrote a WCF service and deployed it on IIS on our company’s internal server A which is NOT connected to the internet.
We developed an ASP.NET web page which consumes that service. The web page is located on another server… Continue reading How to secure communication between WCF on internal server and a web page connected to the internet?
We wrote a WCF service and deployed it on IIS on our company’s internal server A which is not connected to the internet.
We developed an ASP.NET web page which consumes that service. The web page is located on another server… Continue reading How to secure communication between WCF on internal server and a web page connected to the internet?
I loaded a client-side .svclog file inside Microsoft Service Trace Viewer and there are a lot of entries in the log saying setting up secure session and close secure session, each taking more time than usual. For example, set… Continue reading What should be done to determine why it takes so long to set up a secure session using TLS?
I am implementing security on a WCF service from basicHttp to WShttp, the issue is the service sends some passwords for connections to the database that the user can define,test and save.
The service implements a X509 certi… Continue reading WCF WS – Passing passwords through service
We have recently used a security scanning tool to assess security of an application. It raised a particular configuration as a Medium vulnerability. The claims made in the explanation of the discovered vulnerability don’t s… Continue reading A tale of two sources: Is TLS *defense* against Man-in-the-Middle, or not?
Currently we authenticate WCF calls TO a service via ADFS, using the following procedure:
Firstly, we get a SAML token from ADFS
using (var factory = new WSTrustChannelFactory(
new UserNameWSTrustBinding(System.ServiceMo… Continue reading Authenticate WCF call to ADFS through Web Application Proxy (WAP)