title: What's the simplest security method of a WCF service
body: <p>It's running into an Intranet, .net framework 3.5, hosted in IIS 7.0 and it's using wsHttpBinding with null security. Now I have to protect it to allow only specific users can run it. </p>
  
  <p>Seems that I should use SSL and certificates but I'd really like stay away of that because looks complex, basically I'm looking for the simplest way. </p>
  
  <p>I took a look to netTcpBinding and seems to me this is the right way, if so, can you confirm if using net.tcp it would be able to be consumed by some asp.net site.</p>
  
  <p>Any comments are welcome.</p>
  
  <p>Thanks,</p>