Encrypting the ReturnURL in ASP.NET

Question

I am wondering if its possible to encrypt the ReturnURl before it's displayed to the end user.

I am pretty new at .NET, but I have tried using the PostAuthenticateRequest in the Global.asax. But that doesnt seem to ever fire.

I would be using my own encryption logic if this is even possible.

Do you perhaps mean "encode"? Are you worried about query parameters in the return url? — David Duffett
– David Duffett, Commented May 5, 2011 at 17:48
this was inherited code, and per our standards is to encrypt any URL parameters. — zbarker
– zbarker, Commented May 5, 2011 at 18:21
What kind of encryption are we talking here? RSA with keys from your key store? Something symetric like AES? Where do you want to store the key? Does it have to be decrypted? — Petey B
– Petey B, Commented May 5, 2011 at 19:37

Jack Marchetti · Accepted Answer · 2011-05-05 19:36:50Z

3

The only reason you would want to do this is if you have sensitive information in the URL.

And if you have sensitive data in the URL --

Don't.

And also, don't use your own encryption logic. Someone else has already done the heavy lifting for you. This is definitely one area you don't want to reinvent the wheel.

.NET includes plenty of ways to encrypt your data.

A .NET Cryptography Primer

edited May 5, 2011 at 19:36

answered May 5, 2011 at 17:38

Jack Marchetti

15.8k14 gold badges85 silver badges119 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

zbarker Over a year ago

There isn't and sensitive data in the URL.

zbarker Over a year ago

this was inherited code, and per our standards is to encrypt any URL parameters.

zbarker Over a year ago

we actually have our own core component to do encryption

Collectives™ on Stack Overflow

Encrypting the ReturnURL in ASP.NET

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related