<\/div>\n

Merhaba,<\/p>\n

Bu i\u00e7eri\u011fimizde HTTPS(Hypertext Transfer Protocol Secure)<\/em> ve HSTS(HTTP Strict Transport Security)<\/em> ne oldu\u011funu ve Asp.NET Core uygulamalar\u0131nda nas\u0131l kullan\u0131ld\u0131\u011f\u0131n\u0131 k\u0131saca inceleyece\u011fiz.<\/p>\n

HTTPS(Hypertext Transfer Protocol Secure) Nedir?<\/h4>\n
Client ile server aras\u0131ndaki datalar\u0131 \u015fifreleyerek verilerin manip\u00fcle edilmesini engelleyen g\u00fcvenli protokold\u00fcr. Client HTTPS protokol\u00fc ile eri\u015filebilen servera iste\u011fi eri\u015ftirmeden \u00f6nce sunucu sertifikas\u0131n\u0131n public key’ini download eder ve s\u00fcre\u00e7te yap\u0131lacak veri etkile\u015fimini bu key e\u015fli\u011finde kriptolu bir \u015fekilde transfer eder. Aksi taktirde client ve server aras\u0131ndaki ili\u015fki g\u00fcvensiz olacak ve veriler a\u00e7\u0131k se\u00e7ik transfer edilirken g\u00f6r\u00fclebilir olacakt\u0131r.<\/p>\n
Nacizane tavsiyem HTTPS ile ileti\u015fim kurulan banka, e-ticaret vs. gibi parasal a\u00e7\u0131dan kritik bar\u0131nd\u0131ran sitelerde sertifika hatas\u0131 al\u0131yorsan\u0131z ilgili siteden acilen \u00e7\u0131kman\u0131z\u0131 \u00f6neririm.<\/p>\n
HSTS(HTTP Strict Transport Security) Nedir?<\/h4>\n
Browser, yap\u0131lan istek neticesinde \u00fcretilen response’un header’\u0131n da ‘Strict-Transport-Security’ key’ini g\u00f6r\u00fcrse ilgili siteyi kaydeder ve HTTP ile yap\u0131lan istekleri direkt olarak HTTPS’e y\u00f6nlendirir. B\u00f6ylece web sitesinde protokol indirmege ve oturum \u00e7alma sald\u0131r\u0131lar\u0131na kar\u015f\u0131 olu\u015fturulan koruma g\u00fc\u00e7lendirilmi\u015f olmaktad\u0131r.<\/p>\n
Asp.NET Core’da HTTPS ve HSTS Kullan\u0131m\u0131<\/h4>\n
Asp.NET Core mimarisinde HTTPS ve HSTS kullan\u0131m\u0131 middleware seviyesine indirgenerek olduk\u00e7a basit hale getirilmi\u015ftir. ‘Startup.cs’ dosyas\u0131ndaki ‘Configure’ metodu i\u00e7erisinde ‘UseHttpsRedirection’ middleware’i ile HTTP yap\u0131lan istekler HTTPS’e y\u00f6nlendirilmekte ve ‘UseHsts’ middleware’i ile de HSTS devreye sokulmaktad\u0131r.<\/p>\n
\u00d6rnek olarak a\u015fa\u011f\u0131daki kodu inceleyebilirsiniz.<\/p>\n
\r\n public class Startup\r\n {\r\n .\r\n .\r\n .\r\n public void Configure(IApplicationBuilder app, IWebHostEnvironment env)\r\n {\r\n .\r\n .\r\n .\r\n app.UseHsts();\r\n app.UseHttpsRedirection();\r\n .\r\n .\r\n .\r\n }\r\n }\r\n<\/pre>\n
\u0130lgilenenlerin faydalanmas\u0131 dile\u011fiyle…
\nSonraki yaz\u0131lar\u0131mda g\u00f6r\u00fc\u015fmek \u00fczere…
\n\u0130yi \u00e7al\u0131\u015fmalar…<\/p>\n","protected":false},"excerpt":{"rendered":"
Merhaba, Bu i\u00e7eri\u011fimizde HTTPS(Hypertext Transfer Protocol Secure) ve HSTS(HTTP Strict Transport Security) ne oldu\u011funu ve Asp.NET Core uygulamalar\u0131nda nas\u0131l kullan\u0131ld\u0131\u011f\u0131n\u0131 k\u0131saca inceleyece\u011fiz. HTTPS(Hypertext Transfer Protocol Secure) Nedir? Client ile server aras\u0131ndaki datalar\u0131 \u015fifreleyerek verilerin...<\/p>\n","protected":false},"author":1,"featured_media":15425,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3102,3103],"tags":[3491,3492,3489,3490],"class_list":["post-15647","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-asp-net-core","category-asp-net-core-3-1","tag-hsts","tag-http-strict-transport-security","tag-https","tag-hypertext-transfer-protocol-secure"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/15647","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/comments?post=15647"}],"version-history":[{"count":9,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/15647\/revisions"}],"predecessor-version":[{"id":15656,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/15647\/revisions\/15656"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media\/15425"}],"wp:attachment":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media?parent=15647"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/categories?post=15647"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/tags?post=15647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}