I am working on a WCF service that will be running on HTTPS over internet. I am planning to secure the WCF service using X.509 certificates on Service(Server Certificate) and Client side(Client Certificate). Following are my questions.
Before posting here I did a lot of research and went through good number of questions on this forum. But now I am at a point where I get more confused more and more.
Thanks in advance for all the help.
I assume you use only transport level security (ssl) and not message level security (ws-security). you should not have any special problems here. do note that most java clients use jks certificate format and on windows pfx is better.