Hello all,
we have a web site under http who work fine.
Now we pass all in https with a certificate and a basique authentification.
If i call this web site on https with postman , certificate and credentials it's ok
Now on my device android (xamarin android) i need to call this web site and get some information)
I"ve add the certificate on device call this url on https with credentials and it's work fine.
But after read some information i've find this :
https://docs.microsoft.com/en-us/dotnet/fundamentals/code-analysis/quality-rules/ca5359
it's talk about the call back -> ServicePointManager.ServerCertificateValidationCallback
my question is , what i do actually is it enough for to secure OR i need to check also with the call back (https ServicePointManager.ServerCertificateValidationCallback) ?
for me, but i'm not expert at all what i do is enough because there is TLS on both side and user pwd is encrypt
thanks for your comment
