- A link will be provided for the WebSiteA to WebSiteB
- We are not able to code anything in WebSiteA
- I need to pass a token from WebSiteA to WebSiteB (In order to understand the user is coming from WebSiteA)
- Can’t use
Request.UrlReferrerto identify previous site since WebSiteA is HTTPS - Query string is insecure because of replay attack (If any outside get the url it can be re-used)
A link will be provided for the WebSiteA to WebSiteB We are not able
Share
I would personally use an encrypted
POSTvariable which get’s POST’ed to WebSiteB.WebSiteB then decrypts this with the private key.
Optional validation: WebSiteA has a (HTTPS?) webservice, which WebSiteB then checks with the decrypted key to validate / get more information from WebSiteA for that same request.
Some encryption / decryption techniques here: Encrypt and decrypt a string
This way it’s secure and can be checked if it’s trying to be spoofed etc…