Okay, I’m still new to the whole ASP.NET and exactly how it posts back to its page. But I was wondering if it leaves a trace of what content is currently on the page.
For example, if I have a Social Security text box, and wanted to encrypt it and ship it off to another server I would do that through a hidden server script after posting back to the current page via a submit button or something of the sort.
Though if, when the page gets posted back to itself, it reveals the data. It becomes pointless to even encrypt/transfer it somewhere safely if someone was listening or has access to your browser logs.
So does posting back to the page keep the data secure, or does it open it up for easy access like a querystring would? And if it does not is there any secure way to get back to the server for the scripts there?
ASP.NET uses an HTTP POST to send the data to the server – in order to secure any data, encrypt the submission with an SSL certificate and use HTTPS.
By the way, this is not unique to ASP.NET – HTTP POST is the industry-standard way of sending a payload of data over HTTP.