Should the X.509 certificates used in WCF client and WCF service be signed by certificate authority (VeriSign)? Or they can be signed by Windows Root authority?
They can even be self-signed if the corresponding public keys are available to the parties.