The best article is still on msdn.
This is the WCF main site:
Http://msdn.microsoft.com/en-us/netframework/aa663324.aspx
This is the root link of the msdn documentation:
Http://msdn.microsoft.com/en-us/library/dd456779.aspx
Below are some good articles I have read:
Articles and overviews ):
Http://msdn.microsoft.com/en-us/library/dd560536.aspx
The rest Implementation of WCF is better (rest is in progress)
Http://msdn.microsoft.com/en-us/library/dd203052.aspx
WCF transport/message Security Summary
Http://msdn.microsoft.com/en-us/library/ms730301.aspx
If the basic security model does not meet the requirements, you can customize
Http://msdn.microsoft.com/en-us/library/ms730868.aspx
Of course, there are also work around und practices, such as adding some information to the SOAP header:
Http://weblogs.asp.net/paolopia/archive/2008/02/25/handling-custom-soap-headers-via-wcf-behaviors.aspx
Http://www.cnblogs.com/CsharpBlog/archive/2009/11/13/1602740.html
Some articles on msdn can be switched between Chinese and English.
How to configure IIS server to implement server/client certificates in codeproject
Http://www.codeproject.com/KB/WCF/wcf_certificates.aspx
Domestic blogs are not Old Xu and artech:
Http://www.frankxulei.com/
Http://www.cnblogs.com/artech/
I pay more attention to Xu's articles on security.
WSe related: http://www.frankxulei.com /? Cat= 653
WCF related: http://www.frankxulei.com /? Cat = 9
The disadvantage is that the article is slightly messy, but at least there are implementation details.Source codeIs of better reference significance.
Xu has a good introduction to the Security Basics.
Quickly find the comprehensive comparison chart of transport/message security:
Http://www.cnblogs.com/frank_xl/archive/2009/08/04/1515873.html
Xu's basic network security knowledge Tutorial:
Http://www.cnblogs.com/frank_xl/archive/2009/03/01/1400751.html
Http://www.cnblogs.com/frank_xl/archive/2009/02/28/1400007.html (also has wse3.0 on asmx implementation, cool)
If you want to learn more about SSL, please refer to the following link: (let's take a look at how SSL works, and understand why transport security cannot guarantee end-to-end security, only point-to-point security can be implemented)
Http://wenku.baidu.com/view/dd8dbdc66137ee06eff91887.html
Sometimes you need to configure a real CA server in the Process of WCF security programming. This server requires HTTPS support for IIS. refer to the following article:
Http://www.wumingx.cn/post/216.html
If your CA server cannot be accessed on Windows 7 (Vista), see:
Forget the warning is what, anyway, install to refer to the http://support.microsoft.com/kb/922706 with download when windowsserver2003-kb922706-v7-x86-enu.exe patch address
If your WCF Service cannot access certificates, see (winhttpcertcfg ):
Http://weblogs.asp.net/hernandl/archive/2005/02/09/WinHttpCertCfgTool.aspx
Want to persuade others to use WCF instead of wse3.0 on asmx? Please refer to (although the reason is not particularly adequate)
Http://zh-cn.w3support.net/index.php? DB = also & id = 894962