CODEWITHSUNDEEP
asp.net-mvc-3sslencryption
user3117786
user3117786

Reputation: 1

SSL certificate will encrypt the query string values used in my MVC 3 application

I want to encrypt the query string values used in my MVC3 application. If i implement SSL certificate, whether all the parameters passed with url in encrypted form or not. The application is already completed, now its running appscan testing, so its very tough to encrypt and decrypt manually the query string.

Upvotes: 0

Views: 584

Answers (1)

Nilesh Gajare
Nilesh Gajare

Reputation: 6398

As per answer given in this post

Yes, it is. But using GET for sensitive data is a bad idea for several reasons:

Mostly HTTP referrer leakage (an external image in the target page might leak the password1) Password will be stored in server logs (which is obviously bad) History caches in browsers Therefore, even though Querystring is secured it's not recommended to transfer sensitive data over querystring.

Upvotes: 1

Related Questions