Gatul
Gatul

Reputation: 23

Is it secure to send username and password in plaintext from C# to Wordpress site over https

Is it secure to send username and password in plaintext from a C# app to Wordpress site over https?

I figure it is, since the password will be encrypted by https and will not be visible to middlemen.

Thats what happens when you use the Wordpress logjn form and type your password, am I right?

Upvotes: 1

Views: 214

Answers (2)

Ricky Stam
Ricky Stam

Reputation: 2126

Some sites encrypt password before sending them over HTTP event when they use HTTPS. There is a js library that helps with that Crypto Js

But in general yes it is safe cause as you said HTTPS will keep the password safe from man in the middle

You can also find an example here (the example was not written by me): https://codepen.io/gabrielizalo/pen/oLzaqx

// INIT
var myString   = "https://www.titanesmedellin.com/";
var myPassword = "myPassword";


// PROCESS
var encrypted = CryptoJS.AES.encrypt(myString, myPassword);
var decrypted = CryptoJS.AES.decrypt(encrypted, myPassword);
decrypted.toString(CryptoJS.enc.Utf8);

Upvotes: 2

Jack Henry
Jack Henry

Reputation: 302

As long as you have a valid security encryption certificate (SSL or TLS) you should be fine I think.

Upvotes: 1

Related Questions