title: WCF custom security over netTcp
body: <p>I'm new to WCF and I'm making server/client application in which I need to have some user/password schema to maintain some customization settings for each client and to log who access the service, but "security" in the traffic going through the net is not really needed, since information is not sensitive.
  So taking this into account I was searching for a SIMPLE way of accomplishing this but I couldn't find it. </p>
  
  <p>I have a few constraints and conditions:</p>
  
  <ul>
  <li>Windows security is not an option.</li>
  <li>I'm using clickonce deployment, so everything should be contained
  within the installation packet. I don't know the actual list of users
  that are downloading it, so I don't have a way to distribute some
  certificate to all users.</li>
  <li>Also the client will be accesed within the LAN and through several
  WANs. Another requirement has to be met is that the service should
  have very good performance since a lot of data is flowing with each
  response, so the questions is:</li>
  </ul>
  
  <blockquote>
    <p>Does message security hurts performance notoriously?</p>
  </blockquote>
  
  <p>The "manual" way would be to pass the username as a parameter for <em>each</em> method I'm exposing, but it seems like a very dirty solution.</p>
  
  <p>It seems to me a lot of constrains to design this, so that's why I'm asking about this.</p>
  
  <p>Which would be the simplest solution to accomplish this?</p>