Distribute private key with application?

Question

I'm building an application and want it to securely transfer data to a server.

Prasad Raveendran · Answer

Remember, security is a broad subject, and this is a basic example. It's crucial to understand the specific security requirements of your application, follow best practices, and possibly involve a security professional to assess the overall security of your application.

Prasad Raveendran · Answer

To securely transfer data from your .NET Core application to a server, you can use various methods and technologies. Here's an approach using HTTPS, which is a common and secure way to communicate between a client and a server. HTTPS (HTTP over SSL/TLS): .NET Core has excellent support for HTTPS. Ensure that your server has an SSL/TLS certificate configured. Then, you can make HTTPS requests from your .NET Core application using HttpClient.

Aymen Amri · Answer

It depends on the environment and the infrastructure that you will use. The best thing is to use a PKI with a certificate Authority, requests ... but it's generally costly. There is another way that generates a key for every communication then encapsulate it in a cryptographic message that needs only one certificate (you can generate it using openssl). It's the Cryptographic Message Syntax pkcs7. https://learn.microsoft.com/en-us/windows/win32/seccrypto/pkcs--7-concepts