While inspecting traffic through fiddler, I noticed that the calls to my online server were not encrypted, the data sent was easily readable in the soap body even though the call was to https address(SSL is already installed for the domain). I am using transport security with client authentication none. Is it default behavior?, I was under the impression that the data passes to the server on SSL is encrypted too and can’t be viewed.
While inspecting traffic through fiddler, I noticed that the calls to my online server
Share
Yes, if you’ve specified transport security, SSL will be used. I’d suggest 2 possibilities: