SSL and ASP.net questions

From: Cliff Harris (hersh_at_myrealbox.com)
Date: 09/26/03 

Date: Fri, 26 Sep 2003 11:36:08 -0400

I have a couple of SSL questions.
First:
If I would like to protect my entire website by ensuring that all pages are
accessed using SSL (https://)
How would I force that? Would that be an ASP.net config thing, or a
configuration in IIS?

Second:
If I would only like specific pages protected using SSL, but I do _not_ want
to lost my session between
secure and unsecure requests, is there a way to do that? Can it be
accomplished using Server.Transfer or
something?

Oh, and if possible, .Net 1.0 answers would be helpful, but 1.1 is ok too :)

Any help would be appreciated. THanks

-Clint

Relevant Pages

  • Re: OTP over SSL questions
    ... to use OTP or static passwords over SSL. ... attacks, what other attacks can OTP protect against?: ... passwords of course are more secure than static passwords, ... OTP won't protect against the success of a brute force attack, ...
    (comp.security.misc)
  • Re: WAP Security
    ... Hey Ariel, ... Is it really going to be worth using SSL to protect a WAP site? ... > i´m looking to put some webservers to be reached by mobile Phones. ...
    (Security-Basics)
  • Re: E-commerce Security???
    ... Subject: E-commerce Security??? ... There are several issues to address, SSL protects the data in transit, how ... How do you protect the data at rest? ... > Certificate based public key encyption does provide secure transmission, ...
    (Security-Basics)
  • Re: Using SSL
    ... > I am building an intranet application which will work with ... > read in a Microsoft article that SSL should be used on all ... > credentials in the cookie created by forms authentication. ... > Is there any way to protect the credentials but not have ...
    (microsoft.public.inetserver.iis.security)
  • SSL and ASP.net questions
    ... I have a couple of SSL questions. ... If I would like to protect my entire website by ensuring that all pages are ... Would that be an ASP.net config thing, ...
    (microsoft.public.dotnet.framework.aspnet.security)
Quantcast