Furthermore, WindowsIdentity.GetCurrent() isn't appropriate for use in distrbuted systems - the value of it depends on the machine running it and it's only as secure as the machine that's running the code.
As for being able to view traffic over HTTP, you should use HTTPS and certificate pinning to ensure that 1) the traffic is encrypted and 2) only someone with a certificate that matches your public key is able to decrypt the traffic, although you should be aware these come with problems of their own
you would solve this by generating a long string using a crytogrpahic function specifically designed to be resistant to brute force attacks, such as SHA256. this sorts the guessability problem.
1) unless HWIDs are GUIDs (very big numbers that are hard to guess), they are prone to being guessed by computers. and since the attacker would only need to guess one to have a successful attack (ie to gain access), this makes GUIDs not a suitable solution on their own for securing access to a server
You want to modify your code such that the client sends its own secret (HWID) to the server and the server tells the client whether or not it has been accepted. You shouldn't expose the list of acceptable HWIDs to anyone. However:
1. someone could just circumvent using your client and access the website directly (since the website doesnt verify the information) and 2. anyone can visit the website and see the permissible hwids and just copy one to gain access.
the client is doing the authentication check - the code segment you've linked indicates the client downloads a document, then checks that document to determine if its HWID is within the document - this has a few problems
I meant to say that the jsdoc format is understood by quite a few alternative generators (not just jsdoc), so you don't necessarily have to generate XML documentation from jsdoc comments
@Mathematics That's a very unique case, you'd still need to write the documentation yourself if you wanted it to be meaningful, and frankly jsdoc does not take that long to install. At all. Stop being lazy.
I mean sure you might be able to make a tool that looked at a given git repository on github to generate docs but what would the usecase be for that instead of just doing git fetch && jsdoc?