-1

Our web application encrypts the fields and parameters in requests and responses. Is there any way that someone can tamper with or penetrate our application, because if they don't know the parameter it's difficult to inject scripts, right?

  • "Our web application encrypts the fields and parameters in requests and responses." - unfortunately it is not really clear what you are doing here. It looks like that you don't use HTTPS (which encrypts the full communication) but have instead your own idea of encryption. It is unclear how this encryption works, i.e. if it is strong and if it is protected against manipulation. Please provide the necessary details since without these it is impossible to evaluate the security. Please also explain why you choose to proceed this way instead of using HTTPS. – Steffen Ullrich 2 days ago

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.