Pro WCF: Practical Microsoft SOA Implementation

Introducing the WCF Security Features

Microsoft has invested a lot of effort in guaranteeing the security in the Vista platform. Microsoft counterparts viewed its security as a weakness in the early 1990s. Since then, Microsoft has done a commendable job shrugging off that stigma. You may remember the initiative to ensure "secure code" and the "trusted access security" campaigns that Microsoft implemented to address this issue. Microsoft's objective was to educate developers so they will address security needs in the fundamental design.

Windows 2003 Server implemented security as "highest security turned on" by default. You had to downgrade the security privileges to obtain access to resources. WCF is also based on the "guilty until proven innocent" ...