WCF 安全性 - 保护传递的参数
我有几个 WCF 服务，每个服务都有几个参数。该服务使用 https 上的传输安全。如果 fiddler 在计算机上嗅探，它可以看到发送到服务的所有参数。有没有办法保护数据？
I have several WCF services that each except several parameters. The service uses transport security over https. If fiddler is sniffing on the computer it can see all parameters sent to the service. Is there a way to protect the data?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
是的，有一种方法：您不会信任 Fiddler 证书。
Fiddler 的工作方式类似于 HTTPS 代理，因此您的客户端不会使用 HTTPS 连接到服务，而是连接到 Fiddler，并且 Fiddler 会与服务建立新的 HTTPS 连接。因此，Fiddler 已解密所有内容。
为了允许这种情况，您的服务必须信任 Fiddler 证书（自签名），否则您的服务将拒绝与 Fiddler 的连接。一旦您允许 Fiddler 安装其证书到您的证书存储区，它就可以捕获和解密消息。
Yes there is a way: you will not trust Fiddler certificate.
Fiddler works like HTTPS proxy so your client is not connecting with HTTPS to the service but to the Fiddler and Fiddler makes a new HTTPS connection to the service. Because of that Fiddler has all content decrypted.
To allow this scenario your service must trust Fiddler certificate (self-signed) because otherwise your service would refuse the connection to the Fiddler. Once you allowed Fiddler to install its certificate to your certification store it can capture and decrypt messages.