title: WCF service username/password authentication over HTTP without SSL
body: <p>I would like to protect a simple WCF service sending username and password from the client and using a CustomUserNamePasswordValidator. With every example I try on the Web I am stuck behind huge configurations and obscure errors, SSL, certificates, etc...</p>
  
  <p>The most similar alternative (to let you understand better) would be to pass a "serviceUsername" and "servicePassword" parameter (maybe hashed) to each and every method of the service and perform authentication here, but I admit it's an ugly and dirty solution.</p>
  
  <p>I don't mind encrypting credential, because it won't be a security critical service. I need only a basic form of protection.</p>
  
  <p>Thank you!</p>
  
  <p>Alessandro</p>