"ASP.NET MVC: Secure Data Transmission"

Guest Editor: Today's post is from Taras Kholopkin. Taras is a Solutions Architect at SoftServe, Inc. In this post, Taras will review secure data transmission in the ASP.NET MVC framework.Secure data transmission is a critical step towards securing our customer information over the web. In fact, many of our SoftServe applications are regulated by HIPAA, which has the following secure data transmission requirements:Client-server communication should be performed via secured channel (TLS/HTTPS)Client (front-end application) should not pass any PHI data in URL parameters when sending requests to the serverAll data transmission outside of the system should be performed via secure protocol (HTTPS, Direct Protocol, etc.)To satisfy this requirement, let's examine how to secure data transmission in an ASP.NET MVC application.Enable HTTPS DebuggingOne of my favorite ...

via AppSec Street Fighter - SANS Institute http://bit.ly/1YZRNdB