dotnet web services: Securing web services: How to disable WSDL -- dotnet web services

Securing web services: How to disable WSDL

Greg
6/22/2004 3:48:43 PM

dotnet web services:

I am trying to lock down my web services. I have added WSE 2.0 to do custom
authentication, I have removed HTTP-Get and HTTP-post in the web.config, but
I don't want the myservice.asmx?WSDL or even just a call to myservice.asmx
to expose any of the interfaces. Is it possible to do this, and if so how?

Re: Securing web services: How to disable WSDL

Greg
6/22/2004 3:54:43 PM

A little more googling and I found it:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secmod/html/secmod95.asp
<webServices>
<protocols>
<remove name="HttpPost"/>
<remove name="HttpGet"/>
<remove name="Documentation"/>
</protocols>
</webServices>

Specifically, it is the Documentation attribute.

[quoted text, click to view]