Re: Encrypt User ID and Password in client-server communication

From: hdiaz (hdiaz@compli-scan.com)
Date: 10/29/02


From: "hdiaz" <hdiaz@compli-scan.com>
Date: Tue, 29 Oct 2002 12:48:56 -0800


Thanks Kipp. I'll do some research on SSL.

>-----Original Message-----
>Hi Hiram -
>Is there a reason you can't use SSL on the login page?
That's the perfect
>way to secure logins - ID and password are never sent in
clear text, and the
>encryption is handled for you by the browser and the
server.
>
>Hope this helps,
>Kipp Hawley
>Trax Softworks, Inc.
>
>"hdiaz" <hdiaz@compli-scan.com> wrote in message
>news:692101c263e7$14259e00$36ef2ecf@tkmsftngxa12...
>> Is there a way in .Net to encrypt a user id and password
>> that comes as an HTML request from a login page without
>> having to use a third party solution?
>> In other words, when the user enters the user id and
>> password and submits to get authenticated I want the id
>> and password to be transferred encrypted to the server.
>>
>> Thank you,
>> Hiram
>>
>
>.
>



Relevant Pages

  • Re: SSL php code
    ... > Sean I am planning on exclusievely using secure pages (ssl) after the user requests to login. ... This will securely redirect to a login ...
    (comp.lang.php)
  • Re: sendmail with smtp relay authentication
    ... LOGIN PLAIN')dnl ... the mail log and also attached the auto mail response I got. ... m31N0w2T002913: return to sender: User unknown ... 505 5.0.0 Message is sent with SSL but SSL is not allowed ...
    (comp.mail.sendmail)
  • RE: Authorize.Net Plain Text Login Transmission
    ... service provider to find out personally whether or not they are vulnerable. ... Authorize.Net Plain Text Login Transmission ... > function as if you had gone to the correct SSL version of the page. ...
    (Bugtraq)
  • Re: iis 6 ssl redirect initial login encrypted?
    ... Whilst the password isn't passed using either NTLM or Kerberos, it's not necessary for an attacker to know the password. ... another login box that uses https:// ... I just need to> get ssl ...
    (microsoft.public.inetserver.iis.security)
  • Re: Google Secure Access
    ... >> email INCLUDING CLICKING ON THAT LITTLE SSL OPTION. ... Google then SENDS YOUR LOGIN DETAILS IN THE CLEAR TO YOUR ISP. ...
    (sci.crypt)