title: Custom authentication in wcf without certificate, https, ssl and iis
body: <p>First of all sorry for my English, its not my native language. I will try to describe my problem as much as I can.</p>
  
  <p>I searched for a long time on the Internet for a solution where I can create a wcf service that can respond to requests of my clients with username and password required but without creating a certificate, using https or anything else that require a special configuration on the machine where my windows service will be installed.</p>
  
  <p>Here is my point: I want to deploy an application to a lot of my customers. This application will have mobile devices and a server which will give some information to mobile device with the help of wcf. Each customer will have a server and many devices. I don't want that anyone on the web can have access to these information and for this reason, I must implement an authentication procedure with username and password for each request but I don't want to be forced to install a certificate, activate some https port on each machine when I sell a new copy of my application.</p>
  
  <p>I've read that with wcf 4.0, there is a built-in system that can encrypt data and for this reason, I don't want the overhead of implementing anything else if possible.</p>
  
  <p>My question is: Is that possible to have a secure solution considering my requirements and if yes, how can I do that?</p>
  
  <p>If I really must create a certificate and use IIS, https or any other secure solution, it is possible to automate these things in a package that will be installed in a single click wizard into each server machine of my customers?</p>
  
  <p>Thank you in advance for your time.</p>