WCF will work in Partial Trust in .Net 3.5
I was glad to see that it was in the build that just released.
Thom Robbin’s posted a summary of some of the .Net 3.5 features, including:
Partial trust on the client is provided for ASMX parity focussing mainly on partially trusted WCF applications deployed through click-once. Support is provided for basic HTTP binding provided that the application runs in the Intranet zone and have granted the apropriate WebPermission. Secure communication is possible through transport security only. All other features are not available to partially trusted applications including hosting services, duplex communications, non-HTTP transports, WS-* protocols and any WF use.
I assume that means it will work in an XBAP on the internet? The "Intranet zone" mention scares me a bit…
[update from Steve Maine, a PM on the WCF team]
That’s a typo in Thom’s post. We require InternetZone permissions, not Intranet.
XBAP grants WebPermission back to the origin server for HTTP communication; that’s all we need. Providing a good OOB experience for XBAP apps using WCF/HTTP is a primary scenario for our partial trust work on the client