Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How do I prevent a user from sending us confidential data (credit card number, SSN, etc.) over an unsecured channel (HTTP)?

April 26, 2017channel confidential credit card Data SSN unsecured user

0

Posted

How do I prevent a user from sending us confidential data (credit card number, SSN, etc.) over an unsecured channel (HTTP)?

1 Answer

0

Posted

You can’t. If the user sends confidential data via HTTP you can’t go back in time and undo the transmission. Action methods that handle posts of confidential data should use the [RequireHttps] Attribute; the action method will ignore the post and force the sender to use HTTPS.