leastprivilege.com
Certificate based Authentication and WCF (Mode independent)
My third approach for restricting trust when using client certificates works for transport and message security. Furthermore it does not involve any OS level configuration. WCF has a piece of …