Security aspects of storing WCF binding in configuration file
<p>I'm curious whether there can be any security concern regarding storing WCF binding information in configuration file instead of configuring it from code? I'm thinking of cases when the server hosting the WCF service gets compromised, so the attacker can change the service's configuration to use a less secure binding, hence gaining access to otherwise forbidden data.</p>