wcf - serviceDebug includeExceptionDetailInFaults="true" - On live site

Question

I am using a WCF service that sits under an ASP.NET website.

I want to keep service debug / exeption details on when I go live as it is convenient for catching errors in the global.asax file without having to throw fault exceptions.

 <serviceDebug includeExceptionDetailInFaults="true" />

Is there any reason why I should not do this. I have an error handler in place in the ASP.NET site.

Answer 1

您将向客户公开内部细节——这当然可以被视为安全问题。但是，如果您控制客户端并信任您在 ASP.NET 站点上的错误处理，那么您可能就不是这样了。SOAP 消息也会更大。

我认为将其留在生产中通常被认为是一个坏主意。