title: Retrofitting encryption to .NET rich client application with SOAP messages to back end server
body: <p>We have an old .NET rich client application connecting to back end services via SOAP using SSL encryption. Simulating an attack,  I have installed Burpsuite on the local machine and intercepted the traffic, modified it and sent it on to the end point (even though it is encrypted with SSL). What is the best way (quickest / cheapest!) to secure the application against this sort of vulnerability?</p>