detect resubmitted SOAP message requests

Question

My WCF service needs to pass the security audit.  One of the requirements is to prove to auditors that my service is able to detect resubmitted SOAP message requests.  How can I prove that?  Will the soap messages show that? My service is using wsHttpBinding with https enabled.  enableReliableSession is set to true in the binding configuration of the service.   Is this sufficient?

Answer 1

Hi,

If you want to get a feedback from the service, you may consider using duplex communication, but you need use wsDualHttpBinding or NetTcpBinding.

Find an example at: Duplex Services

Best Regards.

---

Haixia
MSDN Community Support | Feedback to us
Develop and promote your apps in Windows Store
Please remember to mark the replies as answers if they help and unmark them if they provide no help.