security - Why use HTTPS for Azure Blob Storage -


i have asp.net website requires login , uses ssl on pages protect user's credentials , authentication cookie. 1 page has image element following src:

https://mystorageaccount.blob.core.windows.net/mycontainer/myimage.jpg?sv=... 

this requests image file private blob container on azure storage, using time-limited shared access signature. don't particularly want image intercepted. however, there point in using https request? surely man-in-the-middle use url within sas timescale receive image anyway?

i realise more secure option fetch image storage server-side, , serve authenticated users, speed important i'd avoid this. question is, when browser requests images azure storage directly, there benefit in https or should use http instead?

with https secure connection done @ tcp layer before http traffic transmitted. host name , port number submitted unsecured (since used establish tcp connection) , once secure connection established remaining http content (the path portion of url , query parameters) submitted securely on https.

this explained in wikipedia article https - http://en.wikipedia.org/wiki/https.


Comments

Popular posts from this blog

IF statement in MySQL trigger -

c++ - What does MSC in "// appease MSC" comments mean? -

javascript - Blogger related post gadget image Resize s72-c [ Need Expert Help ] -