Yesterday saw the release of the beta version of the P&P team’s WCF Security guide.  The guide, Improving Web Services Security: Scenarios and Implementation Guidance for WCF, is the Microsoft recipe book for Windows Communication Foundation. It aims to show you how to build secure services using WCF and promises to be "a compendium of proven practices, product team recommendations, and insights from the field", including application scenarios and step-by-step how-tos.

Best of all it’s free; published as a PDF for download.

The chapters are

1. Security Fundamentals for Web Services
2. Threats and Countermeasures for Web Services
3. Security Design Guidelines for Web Services
4. WCF Security Fundamentals
5. Authentication, Authorization and Identities in WCF
6. Impersonation and Delegation in WCF
7. Message and Transport Security in WCF
8. WCF Bindings Fundamentals
9. Intranet – Web to Remote WCF Using Transport Security (Original Caller, TCP)
10. Intranet – Web to Remote WCF Using Transport Security (Trusted Subsystem,HTTP)
11. Intranet – Web to Remote WCF Using Transport Security (Trusted Subsystem TCP)
12. Intranet – Windows Forms to Remote WCF Using Transport Security (Original Caller, TCP)
13. Internet – WCF and ASMX Client to Remote WCF Using Transport Security (Trusted Subsystem, HTTP)
14. Internet – Web to Remote WCF Using Transport Security (Trusted Subsystem, TCP)
15. Internet – Windows Forms Client to Remote WCF Using Message Security (Original Caller, HTTP)

What, no Information Card? *grin*