The Pattern & Practices group has released a new set of security guidelines. The WCF 3.5 Security Guidelines are for Web services created with Windows Communication Foundation (WCF) 3.5. They are based on principles where possible. The recommendations are also as contextual as possible, but abstracted for reuse. Use them as a starting point, but you will likely need to tailor for your scenario.