Hands-On RESTful Web Services with ASP.NET Core 3

Securing data using HTTPS

A common practice for attackers is to intercept data exchanged between the client and the server. For that reason, it is essential to encrypt communication between them to keep the data secure. SSL uses SSL certificates to set up a trusted connection between the server company and the client. SSL uses symmetric and asymmetric encryption to encrypt keys used during this communication. Let's see a schema of a typical SSL handshake between client and server:

This schema shows the conventional steps of an SSL handshake:

1. The connection starts with the client that initiates the request. Before the start, the server sends ...