开发者

WCF security scenario

开发者 https://www.devze.com 2023-01-19 02:20 出处:网络
I have a WCF service, and two apps behind the Firewall, and third app connect remotely through internet.开发者_JAVA百科 I host the service on IIS.

I have a WCF service, and two apps behind the Firewall, and third app connect remotely through internet.开发者_JAVA百科 I host the service on IIS.

If I restrict the IPs to local IP, and that remote server IP using IIS, would that be sufficient? if yes, Is that a bad idea for another reason rather than security.

Given that the remote server will connect through HTTPs and credentials.

thanks


Securing using IP is a good idea only if you are sure that IPs are static and unlikely to change. For example, local IPs can easily change (typically, they get auto assigned). So, I will go via this route if what you are securing is a critical/sensitive.

0

精彩评论

暂无评论...
验证码 换一张
取 消