Re: Hyperlink variable security

From: Jim Cheshire (jamesche_at_online.microsoft.com)
Date: 07/26/03

  • Next message: IntraRELY: "Re: Hyperlink variable security"
    Date: Fri, 25 Jul 2003 22:55:58 GMT
    
    

    Steve,

    If all of the pages you are requesting are being requested via SSL, the
    data will be encrypted. The strength of that encryption depends upon the
    cipher strength of the certificate.

    Jim Cheshire
    Developer Support
    ASP.NET
    jamesche@online.microsoft.com

    This post is provided as-is with no warranties and confers no rights.

    --------------------
    >From: "IntraRELY" <IntraRELY@yahoo.com>
    >References: <eCtpAYtUDHA.1152@tk2msftngp13.phx.gbl>
    <wdHzvjvUDHA.2116@cpmsftngxa06.phx.gbl>
    >Subject: Re: Hyperlink variable security
    >Date: Fri, 25 Jul 2003 15:37:43 -0700
    >Lines: 59
    >X-Priority: 3
    >X-MSMail-Priority: Normal
    >X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
    >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
    >Message-ID: <uLBf9yvUDHA.1676@TK2MSFTNGP10.phx.gbl>
    >Newsgroups: microsoft.public.dotnet.framework.aspnet.security
    >NNTP-Posting-Host: wsip-68-106-74-63.oc.oc.cox.net 68.106.74.63
    >Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
    >Xref: cpmsftngxa06.phx.gbl
    microsoft.public.dotnet.framework.aspnet.security:6042
    >X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
    >
    >So I can simply GET/POST my variable to the other pages the they will be
    >transmitted securily? I just didnt know if there was any other way to do
    it.
    >
    >TIA,
    >
    >Steve
    >
    >"Jim Cheshire (MS)" <jamesche@online.microsoft.com> wrote in message
    >news:wdHzvjvUDHA.2116@cpmsftngxa06.phx.gbl...
    >> Hi Steve,
    >>
    >> If your site is using SSL, you are using a secure method. Did you have
    >> something specifically that you were concerned about?
    >>
    >> Jim Cheshire
    >> Developer Support
    >> ASP.NET
    >> jamesche@online.microsoft.com
    >>
    >> This post is provided as-is with no warranties and confers no rights.
    >>
    >>
    >> --------------------
    >> >From: "IntraRELY" <IntraRELY@yahoo.com>
    >> >Subject: Hyperlink variable security
    >> >Date: Fri, 25 Jul 2003 11:00:25 -0700
    >> >Lines: 13
    >> >X-Priority: 3
    >> >X-MSMail-Priority: Normal
    >> >X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
    >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
    >> >Message-ID: <eCtpAYtUDHA.1152@tk2msftngp13.phx.gbl>
    >> >Newsgroups: microsoft.public.dotnet.framework.aspnet.security
    >> >NNTP-Posting-Host: wsip-68-106-74-63.oc.oc.cox.net 68.106.74.63
    >> >Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
    >> >Xref: cpmsftngxa06.phx.gbl
    >> microsoft.public.dotnet.framework.aspnet.security:6037
    >> >X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
    >> >
    >> >Hello,
    >> >
    >> >I need to pass a variable from one page which is a datagrid and has a
    >> >hyperlink column. I will be passing the id for a particular row to pull
    >up
    >> >additional details of the record. I want to know the most secure method
    >to
    >> >accomplish this, the site will be using SSL. Are there any MSDN articles
    >on
    >> >this.
    >> >
    >> >TIA,
    >> >
    >> >Steve
    >> >
    >> >
    >> >
    >>
    >
    >
    >


  • Next message: IntraRELY: "Re: Hyperlink variable security"

    Relevant Pages

    • Re: SSL Overhead?
      ... Encryption itself isn't the sole culprit of data expansion. ... behind data expansion is the web service - and not SSL. ... I don't see how your comment on security has any credence. ...
      (microsoft.public.dotnet.framework.compactframework)
    • Re: Secure web authentication system w/o SSL and PKI
      ... Authentication has nothing to do with SSL. ... Why do you want symmetric encryption? ...
      (comp.security.misc)
    • RE: ssh and ids
      ... box is the termination point of the SSL tunnel. ... Subject: ssh and ids ... Your claim is only partially true Peter. ... Encryption remains the bane of network-based intrusion ...
      (Focus-IDS)
    • Re: Why is .NET CF 2.0 (HttpWebRequest Class) using 40-bit Encryption over HTTPS?
      ... EndGetResponsemethod on the HttpWebRequest object. ... encryption, or requires no encryption at all, then my code works perfectly. ... I am investigating how to properly implement SSL Certificates because our ... above) and it still fails to communicate with the newly configured server. ...
      (microsoft.public.dotnet.framework.compactframework)
    • Re: username and Password sent as clear text strings
      ... encryption of the traffic. ... SSL is used. ... client, it would seem like too much hassle for a low possibility hack. ... This is how all web applications on the planet work today by design. ...
      (Pen-Test)