How to make connection secure in ASP.NET?

Question

1.00/5 (1 vote)

See more:

I have created a asp.net project when I run it in browser it shows connection insecure. How to overcome this ? How to make connection secure?

What I have tried:

I have changed the HTTP TO HTTPS
This is a image that shows connection not secure[^]

Posted 1-Aug-19 1:32am

AkashDaniel

Updated 2-Aug-19 8:34am

v3

Add a Solution

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

OriginalGriff · Answer 1 · 2019-08-01T01:48:00

Solution 1

You're going to need a certificate: The Complete Guide To Switching From HTTP To HTTPS — Smashing Magazine[^]

Posted 1-Aug-19 1:48am

OriginalGriff

Afzaal Ahmad Zeeshan · Answer 2 · 2019-08-02T08:34:00

Quote:
I have created a asp.net project when I run it in browser it shows connection insecure.

That is because ASP.NET Core now defaults to HTTPS delivery, so you will need to either disable that—not a good solution—or you can proceed to the website, since this is your local website and does not require network security.

Quote:
How to overcome this ? How to make connection secure?

In your local environment, the connection is safe, the problem comes when you use this on production environment.

See these links to manage this in a local environment (not recommended for production!),
Chrome shows the advanced > proceed to unsafe version for some website only - Google Chrome Help[^]
How do I disable the warning Chrome gives if a security certificate is not trusted? - Super User[^]

Lastly, I would like to add, ASP.NET Core team added this requirement following the insanely important requirement on the internet to utilize HTTPS instead of HTTP—this might sound a normal use case, and you might say that your webpages do not request for input, or secure and sensitive information, but you forget that your webpages do come with URLs for those pages where you might request the information. You can purchase a certificate, or you can use Let's Encrypt and get a certificate for free for your production-ready environment.

Check here,
Configuring LetsEncrypt for ASP.NET Core and IIS - Rick Strahl's Web Log[^]
https://medium.com/@mathiaslykkegaardlorenzen/letsencrypt-asp-net-core-middleware-a294dcf34d07[^]
GitHub - natemcmaster/LetsEncrypt: ASP.NET Core integration for free HTTPs certificates from https://letsencrypt.org[^]