Basically, if I have a plain WCF Service over HTTPS is it automatically secure?
[ServiceContract]
public interface ICalc
{
[OperationContract] int add(int a, int b);
}
public class Calculator : ICalc
{
public int add(int a, int b) { return a + b; }
}
I figure the actual SOAP message isn't encrypted here, but is it still secure if I use https? Basically, if I use a basichttpbinding with no security settings in my config over https://www.myserver.com/services/Calc.svc is that secure?