Silverlight 4 和 WCF 服务之间的安全数据传输
背景
因此，在我的 WCF 服务上摸索 wsHttpBinding 后，我发现 Silverlight 不支持它！在考虑通过线路发送在服务端和客户端都解密的加密数据后，我认为这可能是一个性能问题。另外，我不太确定这是否是做事的好方法。
以 silverlight 应用程序的登录页面场景为例，我什至认为我可以在 aspx 端进行登录，然后在成功验证后我可以重定向到托管 Silverlight 应用程序的页面。这里的问题是，一旦 xap 下载到客户端，它就可以从浏览器运行，从而完全绕过 aspx 登录页面。
问题
如果我想在 silverlight 客户端和 wcf 服务之间安全地传输数据，我有哪些选择？我不希望网络上的任何数据对任何潜在的线路嗅探器或任何东西有用。
Background
So after fumbling around with wsHttpBinding on my WCF services I find out that Silverlight doesnt support it!! After thinking of sending encrypted data over the wire that is decrypted on both the service and client side I figured that this might be a performance issue. Plus Im not really sure if this is the neat way to do things.
Taking for example a login page scenario for the silverlight application, I even thought that I can do the login on the aspx side and then on successful authentication I can redirect to the page that hosts the Silverlight application. The problem here is that once the xap is downloaded to the client, it can be run from a browser and thereby bypass the aspx login page altogether.
Question
What are my options if I want to transfer data securely between the silverlight client and the wcf service? I don't want any data over the wire to be useful to any potential wire sniffer or anything.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
正如 @Shiraz 建议的那样，您可以使用 basicHttpBinding 进行 https 传输。
您支持多种消息级证券。确实，basicHttpBinding 并不支持所有消息级别的安全性。但它确实有一些作用。
http://msdn.microsoft.com/en-us/library/ms730294.aspx 总结了 basicHttpBinding 的所有可能选择。
从绑定方面来看，您没有太多选择。
As @Shiraz suggested you can go for https transport with basicHttpBinding.
You have a variety of message level securities supported. Well it is true that basicHttpBinding doesn't support all the message level security. But it does some.
http://msdn.microsoft.com/en-us/library/ms730294.aspx summarizes all the possible choices for basicHttpBinding.
From the binding side, you don't have many choices.
您可以将 basichttpbinding 与 https 结合使用。
看看这个帖子中的答案： http://forums.silverlight.net/forums /t/13275.aspx
You can use basichttpbinding with https.
Have a look at the answer in this thread: http://forums.silverlight.net/forums/t/13275.aspx