c# - Https Web API from console app or android app -
i have https web api hosted in azure. if making call console application, post/get data passed in encrypted form or need in console app?> reason asking if use fiddler, can see data in clear text. of course decrypt https traffic checked
similarly if web api consumed android mobile app, app need ensure traffic cannot sniffed?
i new https , security. or pointer of immense help
i'd recommend making web api only accessible https. , then, make sure yoru android app uses https. also, ensure if android app presented invalid certificate stop running , not send data.
https should handle sniffing/mitm point of view. however, must still have secure authentication mechanism , such well.
Comments
Post a Comment