ASP.NET Core MVC Interview Question #115

Why is HTTPS important for ASP.NET Core MVC security?

Authentication, Authorization, Security & State Management Mid-Level Intermediate

Quick Interview Answer

HTTPS encrypts HTTP traffic between the browser and server, protecting credentials, authentication cookies, anti-forgery tokens, form data, and page content from network interception and modification.

Detailed Explanation

Production applications should use HTTPS consistently and configure secure cookies appropriately. HSTS can instruct supporting browsers to use HTTPS for subsequent requests after a secure connection has been established.

Code Example

if (!app.Environment.IsDevelopment())
{
    app.UseExceptionHandler("/Home/Error");
    app.UseHsts();
}

app.UseHttpsRedirection();