WCF authentication

Question

if i am using HttpClientCredentialType.Basic as ClientCredentialType and i only need wcf authentication for security should i worry about certificates and https?

Answer 1

If you don't use transport security then the basic authentication can be sniffed.
So, it depends on how secure you need your app to be.

Answer 2

HttpClientCredentialType.Basic means you send your user name and password virtually in plain text. You must never use it without transport level security if it is production code.