ASHX and security and https

Question

User-1694925868 posted

I'm writing my first ashx application and I got some questions in regard to security.  The only application I've written before with security in mind was WCF.  However, so far with an ashx service I don't know if I would need a https connection.  I know my boss is going to be asking me if this ashx is secure.  He's used to WCF and the fact that I'm calling a ashx from within the same application is going to be new to him and I need to be prepared to answer questions.  Not even sure what I'm doing here.  First time.

Answer 1

User753101303 posted

Hi,

It all depends on what could be seen on the wire.  Would you post in this forum a trace of your http requests? If yes use http, if not use https. I would suggest to always start by default with https and use http if you find you can (rather than to start with http and maybe find you would need https).