ASP.NET Core in Action, Third Edition

28 Adding HTTPS to an application

This chapter covers

• Encrypting traffic between clients and your app using HTTPS
• Using the HTTPS development certificate for local development
• Configuring Kestrel with a custom HTTPS certificate
• Enforcing HTTPS for your whole app

Web application security is a hot topic at the moment. Practically every week another breach is reported, or confidential details are leaked. It may seem like the situation is hopeless, but the reality is that the vast majority of breaches could have been prevented with the smallest amount of effort.

In chapter 29 we’ll look at a range of common attacks and how to protect against them in your ASP.NET Core app. In this chapter we start by looking at one of the most basic security measures: ...