You can substitute web.config sections, even custom ones, using the ConfigurationBuilder in System.Configuration.
Kerberos is a beast. No, not Cerberus the mythical 3-headed dog. We’re talking about the protocol that phonetically shares the same name. It’s been the source of multiple headaches, whether it be IIS configuration on the service machine or trusted sites configuration on the client machine. We’re going to shed some light on this issue and make kerberos negitiation available when you’re application is not running on IIS and even when it’s not running on Windows.
If you want to host a SOAP service using transport layer security or mixed security, the bindings can be quite picky. They want to have the security be end-to-end. This can make things tricky when trying to do things like SSL termination in a load-balancer.