Completed Chapter 5.
Security applied up to this point:
Transport level (server side SSL)
Message level: server and client certificate.
Client certificates are added to the server as trusted people.
Server certificate is added to the client as trusted people.
Client sertificate is set via app.config.