WCF binding over HTTPS an security at message level <p>I have a WCF Service over HTTP with the following binding:</p> <pre><code>&lt;basicHttpBinding&gt; &lt;binding name="RegistreReferenciaBinding"&gt; &lt;security mode="Message"&gt; &lt;message clientCredentialType="Certificate" /&gt; &lt;/security&gt; &lt;/binding&gt; &lt;/basicHttpBinding&gt; </code></pre> <p>A third party service is connecting to this Service and now this third party is requiring an HTTPS connection.</p> <p>The problem is that I need to maintain the security at message level in order to be compatible with the third party Service.</p> <p>To resume the situation what I need to do is configure the service to be HTTPS compatible, without client certificate while maintaining the security at message level.</p> <p>What is the configuration needed to get this Service working with the same configuration but over HTTPS?</p> <p><strong>UPDATE:</strong></p> <p>I tried to use the following configuration:</p> <pre><code>&lt;basicHttpBinding&gt; &lt;binding name="RegistreReferenciaBinding"&gt; &lt;security mode="Transport" /&gt; &lt;/binding&gt; &lt;/basicHttpBinding&gt; </code></pre> <p>But with this configuration the third party Service could not connect because there was no security at message level.</p> <p>From what I viewed in captured messages with Wireshark, the third party Service is using SOAP 1</p> <p>The error message with this configuration was:</p> <pre><code>&lt;?xml version="1.0"?&gt; &lt;s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"&gt; &lt;s:Body&gt; &lt;s:Fault&gt; &lt;faultcode&gt;s:MustUnderstand&lt;/faultcode&gt; &lt;faultstring xml:lang="es-ES"&gt;El destinatario de este mensaje no entendió el encabezado 'Security' del espacio de nombres 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd', por lo que el mensaje no se procesó. Este error suele indicar que el remitente del mensaje habilitó un protocolo de comunicación que el destinatario no puede procesar. Asegúrese de que la configuración del enlace del cliente es coherente con el enlace del servicio. &lt;/faultstring&gt; &lt;/s:Fault&gt; &lt;/s:Body&gt; &lt;/s:Envelope&gt; </code></pre> <p><strong>UPDATE 2</strong></p> <p>I also tried with the following configuration:</p> <pre><code>&lt;basicHttpBinding&gt; &lt;binding name="RegistreReferenciaBinding"&gt; &lt;security mode="TransportWithMessageCredentials"&gt; &lt;message clientCredentialType="Certificate" /&gt; &lt;/security&gt; &lt;/binding&gt; &lt;/basicHttpBinding&gt; </code></pre> <p>And it failed again.</p>