CODEWITHSUNDEEP
c#apachehttp
J. Doe
J. Doe

Reputation: 915

Why is header and body not encrypted when using HttpClient HTTPS requests?

Consider the following function:

private string ServerUrl = "https://api.myserver.com";

public async Task<T> PostRequest<T>(string hook, HttpContent content)
{
    try
    {
        var response = await http.PostAsync(ServerUrl + hook, content);
        var contentString = await response.Content.ReadAsStringAsync();

        return Serializer.ToJsonObject<T>(contentString);
    }
    catch
    {
        return default(T);
    }
}

Now it works correctly, but as I'm making requests to HTTPS shouldn't header and body be encrypted?

I'm checking things with Fiddler v4 and it isn't.

Is there something I am missing or don't quite understand how that should work?

My server uses LetsEncrypt! Self-signed certificate.

Upvotes: 0

Views: 158

Answers (1)

squillman
squillman

Reputation: 13641

Fiddler can decrypt the content before it's displayed to you in the UI. Do you have this setting enabled?

enter image description here

Upvotes: 1

Related Questions