title: WCF Transport security over NetTcpBinding and NTLM: is server certificate needed for encryption?
body: <p>WCF Transport security over NetTcpBinding is based on TLS-over-TCP. In my understanding TLS-over-TCP needs a certificate for TLS handshaking to exchange a shared secret.</p>
  
  <p>While in Windows workgroup, NTLM provides mechanism to exchange a shared secret based on user credential. </p>
  
  <p>My question is: when the following is used:</p>
  
  <ol>
  <li>security mode: Transport</li>
  <li>clientCredentialType="Windows"</li>
  <li>NetTcpBinding</li>
  <li>in Windows workgroup environment (NTLMv2 is used?)</li>
  </ol>
  
  <p>is a server certificate needed for encryption?</p>
  
  <p>Please also point out if my understanding is incorrect. Additional reading links are appreciated too.</p>