https

What is the difference between GET and POST encryption?

by

GET data is appended to the URL as a query string: https://example.com/index.html?user=admin&password=whoops Because the data is appended to the URL, there is a hard limit to the amount of data you can transfer. Different browsers have different limits, but you’ll start to have problems around the 1KB-2KB mark. POST data is included in the body … Read more

How to invoke HTTP POST method over SSL in ruby?

by

You are close, but not quite there. Try something like this instead: uri = URI.parse(“https://auth.api.rackspacecloud.com”) http = Net::HTTP.new(uri.host, uri.port) http.use_ssl = true http.verify_mode = OpenSSL::SSL::VERIFY_NONE request = Net::HTTP::Post.new(“/v1.1/auth”) request.add_field(‘Content-Type’, ‘application/json’) request.body = {‘credentials’ => {‘username’ => ‘username’, ‘key’ => ‘key’}}.to_json response = http.request(request) This will set the Content-Type header as well as post the JSON … Read more

Is middleware neeeded to redirect to HTTPS in ASP.net and C#?

by

You can use your own middleware class, but typically I just do something like this in my Startup configuration: app.Use(async (context, next) => { if (context.Request.IsHttps) { await next(); } else { var withHttps = Uri.UriSchemeHttps + Uri.SchemeDelimiter + context.Request.Uri.GetComponents(UriComponents.AbsoluteUri & ~UriComponents.Scheme, UriFormat.SafeUnescaped); context.Response.Redirect(withHttps); } }); What this does is just grab the entire URL, … Read more

fiddler2 unable to generate certificate

by

In Win7 So go here: C:\Users\<username>\AppData\Roaming\Microsoft\Crypto\RSA\ Select all the files (named with UUIDS). Move those files to your Desktop or other folder outside AppData dir. Launch Fiddler, go to Tools | Fiddler Options | Enable HTTPS decryption See that it works this time (hopefully). Move the files back from their temp location (i.e., Desktop), to … Read more

With HTTPS, are the URL and the request headers protected as the request body is?

by

Quoting the HTTPS RFC: When the TLS handshake has finished. The client may then initiate the first HTTP request. All HTTP data MUST be sent as TLS “application data”. Essentially, the secure SSL/TLS channel is established first. Only then the HTTP protocol is used. This will protect all the HTTP traffic with SSL, including HTTP … Read more

Why make use of HTTPS when Fiddler can decrypt it [duplicate]

by

Fiddler performs a MITM technique. To make it work, you need to trust its Certificate: http://www.fiddler2.com/fiddler/help/httpsdecryption.asp If you don’t, it won’t decrypt anything… how can Fiddler2 debug HTTPS traffic? A: Fiddler2 relies on a “man-in-the-middle” approach to HTTPS interception. To your web browser, Fiddler2 claims to be the secure web server, and to the web … Read more