Securing JSON and ASP.NET MVC2

Question

I'm sending sensitive data back and forth using AJAX requests in my ASP.NET MVC2 application using JSON. If I'm potentially sending back sensitive data back to the client, is there a preferred mechanism of securing the data such that it can then be decrypted by the javascript code? Is there a standard encryption library that I can use in JS and C# together?

Thanks

Darin Dimitrov · Accepted Answer · 2012-06-10 20:20:37Z

2

Don't send sensitive information to the client. Or if you do, use HTTPS which should protect you from man-in-the-middle. The best is to keep sensitive information on the server. Obviously depending on the level of sensibility and the kind of information you are dealing with there might be different techniques.

answered Jun 10, 2012 at 20:20

Darin Dimitrov

1.0m275 gold badges3.3k silver badges3k bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Adam Levitt Over a year ago

This is a pretty awesome feature built into C#.net -- [ScriptIgnoreAttribute] -- msdn.microsoft.com/en-us/library/…

Darin Dimitrov Over a year ago

For me it's pretty useless. Personally I always use view models and only define the properties that the view needs. This way the serializer will only include whatever properties I have defined in my view model. Remember: never pass domain models to your views (in this case the view is a JSON representation), always define and pass view models.

Adam Levitt Over a year ago

"never pass domain models to your views" - I generally don't do this, but is there a good article that provides some good details on this practice?

Collectives™ on Stack Overflow

Securing JSON and ASP.NET MVC2

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related