Security - It is recommended to not send any sensitive Info

Hi,

I have Login.aspx form

1. UserId & Password (TextBox controls)

2. Login button (button control)

On Login Postback occured and everyting works as expected. But when I see request (using filddler) i can see user name and password as plain text as below.

What I can do for this.

__EVENTTARGET=btnLogin&__EVENTARGUMENT=&__VIEWSTATE=3HVAo0xXDxbiJPSckha9wY%2FvmVfvAv1xRSy36Chwv5RB%2BlVcgYWXgtwNauNazToXGCrMcs4%2BvhKazUyUQm2Yz7k8ICNinpm%2FL0H1dOP67fs%3D&__VIEWSTATEGENERATOR=1806D926&__VIEWSTATEENCRYPTED=&__EVENTVALIDATION=uezsZj9YVD2GdMVij2ggZ3GAkisLo%2BeNjmffPGdt9DfiJ4jypLJCkwUH8Gp8%2FgDmQHCiB5GpJ%2B2J5htcQ%2BUY9c2jUT9Ml2QjHn06ILVbi8GTMg8O7ONiT4ZDwKK5lu5E92QmWkEZp2bmCdXRBuSyCF54s7IxTPl528EfWoLuWRU%3D&txtEmail=sanjay%40gmail.com&txtPassword=Welcome1234

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Jeeva Subburaj7y ago
Accepted answer
Ideally, in production environment, you will be using SSL certificate (HTTPS) which will encrypt the data before sending it even fiddler can not decrypt it unless you install the fiddler certificate in production environment which is very unlikely.