Hot answers tagged

3

If you enable SSL/TLS on the server side, the client has to be able to "speak SSL/TLS" too. Otherwise, the connection will end up being reset. Just changing a web-service to use "https" does not auto-magically change all applications communication encrypted. This is a shared protocol. If I suddenly goes speaking French but you only understand English, ...


2

Minor ranting This is a bit broad, and there may be some that are unknown at present, but there's usually good references out there if you're willing to search for them. Code execution isn't the only problem. You want to be careful of things that can lead to code execution. However, and as always, it's important to study these functions to see what ...


1

If you configure the server to redirect HTTP to HTTPS, you shouldn't need to modify the application code whatsoever (assuming it will follow a redirect). However, when the request is first made, it will not be encrypted. An attacker could man-in-the-middle or passively sniff the connection in order to read request data or even prevent it from redirecting to ...



Only top voted, non community-wiki answers of a minimum length are eligible