c# - Https Web API from console app or android app -


i have https web api hosted in azure. if making call console application, post/get data passed in encrypted form or need in console app?> reason asking if use fiddler, can see data in clear text. of course decrypt https traffic checked

similarly if web api consumed android mobile app, app need ensure traffic cannot sniffed?

i new https , security. or pointer of immense help

i'd recommend making web api only accessible https. , then, make sure yoru android app uses https. also, ensure if android app presented invalid certificate stop running , not send data.

https should handle sniffing/mitm point of view. however, must still have secure authentication mechanism , such well.


Comments

Popular posts from this blog

blackberry 10 - how to add multiple markers on the google map just by url? -

php - guestbook returning database data to flash -

delphi - Dynamic file type icon -