1

I have a WCF service configured to use two-way certificate authentication on the messages.

The server is also locked down through a firewall to only allow traffic from a single IP:Port that the client is also using.

Is SSL for the transport layer still a good idea, or overkill?

2

In a word: yes.

All message encryption does is make part of the communication confidential. SSL makes sure you're talking to the right server and makes sure nobody listening in can figure out who you're talking to.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.