I have a simple pox operation using webHttpBinding and am specifying a security mode of transport to enable HTTPS. Once i do this though, I can no longer send http traffic to it. I'd like the option of both. How can I enable https while also keeping http?
A:
You will have to create service with two WebHttpBinding endpoints. One endpoint will use HTTP (binding without transport security) and second endpoint will use HTTPS (binding with transport security). You will also have to configure your IIS to support both HTTP and HTTPS (assign certificate).
The question is if this is reasonable? If you really think that your service has to provide secure transport because of confidental data then providing unsecured endpoint in the same time doesn't seem like a good solution.
Ladislav Mrnka
2010-10-11 17:00:47
No of course it isn't a good solution. There was just an edge case that cropped up where someone couldn't send something to us over HTTPS and the data being passed wasn't that sensitive. It was only intended to be temporary.
James Alexander
2010-10-12 19:25:38