locked
ASHX and security and https RRS feed

  • Question

  • User-1694925868 posted

    I'm writing my first ashx application and I got some questions in regard to security.  The only application I've written before with security in mind was WCF.  However, so far with an ashx service I don't know if I would need a https connection.  I know my boss is going to be asking me if this ashx is secure.  He's used to WCF and the fact that I'm calling a ashx from within the same application is going to be new to him and I need to be prepared to answer questions.  Not even sure what I'm doing here.  First time.

    Thursday, September 24, 2015 5:31 PM

All replies

  • User753101303 posted

    Hi,

    It all depends on what could be seen on the wire.  Would you post in this forum a trace of your http requests? If yes use http, if not use https. I would suggest to always start by default with https and use http if you find you can (rather than to start with http and maybe find you would need https).

    Friday, September 25, 2015 4:00 AM