Hi Guys,
I'm studying for my WCF exam and I'm at the point of certificates.
I understand the general concept of certificates, in terms of it proves who you are (or your service) and can be used to encrypt data.
What I don't understand is how you're supposed to use them with a client.
I have seen tutorials about how to actually cretae and use a certificate "for testing and debugging only", but what about the real world?
Suppose I buy a certificate from a certificate authority, how can I then use that to make sure that my WCF service is secure using message level security?
I would want everything going to and from the client to have message level security.
Also, I want the client to be able to authenticate the service and I want the service to authenticate the client.
Does the client need to purchase their own certificate for this, or can I issue one to them based on the certificate I have some how?
Also, how do I ...
Go to the complete details ...