0

I use the same certificate both for client and service authentication on Wcf with message security. Does it cause any serious vulnerability?

mkus
  • 3,357
  • 6
  • 37
  • 45

1 Answers1

0

You don't want to have the full certification on both the server and client for security reasons. Have a look at this Server / Client Certs

Phil Murray
  • 6,396
  • 9
  • 45
  • 95