Re: Encrypt User ID and Password in client-server communication

From: hdiaz (hdiaz@compli-scan.com)
Date: 10/29/02


From: "hdiaz" <hdiaz@compli-scan.com>
Date: Tue, 29 Oct 2002 12:48:56 -0800


Thanks Kipp. I'll do some research on SSL.

>-----Original Message-----
>Hi Hiram -
>Is there a reason you can't use SSL on the login page?
That's the perfect
>way to secure logins - ID and password are never sent in
clear text, and the
>encryption is handled for you by the browser and the
server.
>
>Hope this helps,
>Kipp Hawley
>Trax Softworks, Inc.
>
>"hdiaz" <hdiaz@compli-scan.com> wrote in message
>news:692101c263e7$14259e00$36ef2ecf@tkmsftngxa12...
>> Is there a way in .Net to encrypt a user id and password
>> that comes as an HTML request from a login page without
>> having to use a third party solution?
>> In other words, when the user enters the user id and
>> password and submits to get authenticated I want the id
>> and password to be transferred encrypted to the server.
>>
>> Thank you,
>> Hiram
>>
>
>.
>



Relevant Pages

  • Re: SSL php code
    ... > Sean I am planning on exclusievely using secure pages (ssl) after the user requests to login. ... This will securely redirect to a login ...
    (comp.lang.php)
  • Re: sendmail with smtp relay authentication
    ... LOGIN PLAIN')dnl ... the mail log and also attached the auto mail response I got. ... m31N0w2T002913: return to sender: User unknown ... 505 5.0.0 Message is sent with SSL but SSL is not allowed ...
    (comp.mail.sendmail)
  • RE: Authorize.Net Plain Text Login Transmission
    ... service provider to find out personally whether or not they are vulnerable. ... Authorize.Net Plain Text Login Transmission ... > function as if you had gone to the correct SSL version of the page. ...
    (Bugtraq)
  • Re: Google Secure Access
    ... >> email INCLUDING CLICKING ON THAT LITTLE SSL OPTION. ... Google then SENDS YOUR LOGIN DETAILS IN THE CLEAR TO YOUR ISP. ...
    (sci.crypt)
  • RE: Strange behavior using SSL and "FORMS" authentication.
    ... otherwise you would not even get the login page ... (as I assume you have SSL for the whole site, ... Help Secure Forms Authentication by Using Secure ... >-The security certificate is valid. ...
    (microsoft.public.dotnet.framework.aspnet.security)