How to Use HTTPS in ASP.NET Core? Example

HTTPS in ASP.NET Core ensures secure communication between clients and servers using SSL/TLS. By enforcing HTTPS, data is encrypted, preventing man-in-the-middle attacks and protecting sensitive information like passwords or tokens. ASP.NET Core makes it easy to redirect HTTP requests to HTTPS and configure certificates.

Key Features:

• Enforces secure client-server communication
• Supports SSL/TLS certificates
• Easy redirection from HTTP to HTTPS
• Works with Kestrel, IIS, and reverse proxies
• Enhances security and user trust

Example:
Redirect HTTP to HTTPS in Program.cs:

var builder = WebApplication.CreateBuilder(args);
var app = builder.Build();

app.UseHttpsRedirection();

app.MapGet("/", () => "Hello Secure ASP.NET Core!");

app.Run();

Configure Kestrel to use a certificate:

builder.WebHost.ConfigureKestrel(options =>
{
    options.ListenAnyIP(5001, listenOptions =>
    {
        listenOptions.UseHttps("certificate.pfx", "password");
    });
});

Using HTTPS in ASP.NET Core ensures that web applications are secure, trusted, and compliant with modern security standards.

Citations:

• Learn more on Savanka
• Official ASP.NET Core Documentation