The title says it all.
There are certainly ways to do hosting specific tricks - but the concept of client certs should be baked into Web API itself. This is important for security scenarios.
From an OM point of view this logically belongs on HttpRequestMessage (in one or the other way).
There are certainly ways to do hosting specific tricks - but the concept of client certs should be baked into Web API itself. This is important for security scenarios.
From an OM point of view this logically belongs on HttpRequestMessage (in one or the other way).