Home/ Questions/Q 6234099
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-24T10:25:21+00:00

If you have an SSL certificate for a web site, is it necessary to

  • 0

If you have an SSL certificate for a web site, is it necessary to make the ViewState more difficult to decode. Without any extra development, it appears that ASP.NET encodes it as a base 64 string. I found some sample code to easily decode this hidden field “__VIEWSTATE”. Doesn’t SSL encrypt this (along with other things) for you?

PS: If this is the incorrect site to post this question, please let me know. I also have it on the Security site, but I don’t know how much they know about web applications and ASP.NET.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    SSL will encrypt the data during transport. When the data is moving between the server and browser, including the view state.

    It is up to you to do more on the page, if you feel the need. At the point that a browser is viewing the page, it has been transferred securely to the browser – do you feel that you need to protect the view state from the person using the browser?

    • 0