Security in WCF without using SSL

Question

I have developed a MVC web application using WCF services .

For eg I have a service url as http://localhost/abcservice/method1. I am using basichttpbinding service.

In my controller I am adding the service reference and calling it:

serviceclient a = new serviceclient();
a.method1();

I am calling this service without using any authentication.

Out of curiosity, I have this question:

Is it possible to secure the WCF services hosted in IIS without buying SSL certificates ?

Is it possible to implement the authentication functionality by sending the username and password from the client and authenticating it?

If yes ,how? Any help would be greatly appreciated as most of the links will redirect using certificates for security.

Answer 1

Here are some of the links which comes close to ur requirement: http://www.antaressolutions.com.au/blog/Lists/Posts/Post.aspx?ID=12 http://bartwullems.blogspot.in/2010/01/username-authentication-in-wcf.html WCF Service Authentication from MVC App sharing same Membership Provider