0

I have an Angular application running on a Live server with an SSL certificate.

The application uses MVC5 + Web API with Individual User Authentication on the server.

Using Chrome's Developer Tools, I am tracking the Network traffic to view data send to over HTTPS.

When I log into the app, it shows me the FORM DATA containing my login creditials?

Also tested on IE and it displays my login credentials in the REQUEST BODY?

Does this mean that the request to the server are not using HTTPS?

I have also, tried to use Fiddler with no luck.

Thanks

2 Answers 2

1

data visible under Form Data is fine. Chrome developer tools will show you all the parameters passed to the server irrespective of protocol. Check for the values in Request URL and Request Method under General section. They are important. For security purpose they should have https (along with your domain) and POST for login service.

Sign up to request clarification or add additional context in comments.

Comments

1

Your browser see https data unencrypted. Otherwise, it couldn't display the webpage.

Comments

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.