title: Web Service Custom Binding - sign SOAP header and message, but don't encrypt
body: <p>I am trying to figure out how to call a Java Web Service (blackbox) from .NET which expects each request to be signed with a certificate (which is no problem).</p>
  
  <p>I don't get it. Whatever I try, it fails. After spending hours with researching and testing I think the right way should be to use a customBinding instead of a basicHttpBinding. What I want to achieve is to sign the header as well as the message body. </p>
  
  <p>By using authentication mode <strong>CertificateOverTransport</strong> only the SOAP header is signed, not the body. By using authentication mode <strong>MutualCertificate</strong> everything is signed and encrypted.</p>
  
  <p>Do I have any chance to disable the encryption of the whole message?</p>