c# - Authenticate traffic between application and server -

introduction

i have application build-in registration form. registration form post webserver , create account user. let's register page (on server) found @ https://mywebsite/register.php, stops user manually going there , register account himself (when sending post arguments it, there no html form fields or there).

the user can put proxy between application , webserver, requests , modify them. might not sound issue of you, functions (the webserver more handling registration requests) need know request came application , not user.

my question

how know request came application , unmodified? personally, have thought encrypting data (additionally https) formula (like hardware authenticators do) , decrypt them on webserver.

i'd hear thoughts on , possibly solution this.

there no difference between browser , malicious user tools. browser can read , send, user can too. clientside (javascript, https) encryption not going help, user can extract encryption method used page , repeat encryption own data.

if want prevent posting random data, use anti-forgery-token. if can explain how application sends data server , how (and why) protect that, perhaps more useful answer can given.