RE: Forms Authentication and SSL

From: Jacob Yang [MSFT] (jiany_at_online.microsoft.com)
Date: 10/22/03 

Date: Wed, 22 Oct 2003 07:36:26 GMT

Hi Michael,

>From security consideration, IE will prompt us this security alert either
when we enter into a secure website from a non-secure one, or vice versa.
To my knowledge, we cannot dismiss this alert, unless we check the "In the
future, do not show this warning" checkbox.

This security alert is very useful in the case if we want to send out our
secret information, such as credit account number, password, over internet.
With this alert, we should be notified whether the web site we are
communicating is a real secure or valid web site before sending out the
secret information. Without this security alert, we have no sense whether
the web site is secure.

Does it answer your question? If I have misunderstood your concern, please
feel free to let me know.

Best regards,

Jacob Yang
Microsoft Online Partner Support
Get Secure! ¨C www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.

Relevant Pages

  • Re: HTTPS form NOT website
    ... when we specify the full path and since these are all non-https links, ... the form shows up with an alert "This page contains but secure and ... non-secure items" - this message is not very encouraging for our ...
    (microsoft.public.dotnet.general)
  • Re: Password Protect Excel Spreadsheet?
    ... Length is only more secure if the password is not a dictionary word, ... www_insider_org@postmaster.co.uk (Alert) wrote: ... > password is impenetrable to the average user. ...
    (microsoft.public.excel)
  • Correct way to go back to http from https?
    ... I had to remove all urls which started with http: ... get the alert in IE about secure and nonsecure items, ... no way to go back to regular http: from my secure part of the site. ...
    (alt.html)
  • Re: How to restrict incoming VPN to one internal IP address
    ... > Why would you never use ISA? ... > secure. ... This might explain it - since I've never seen an alert for the firewalls ...
    (microsoft.public.win2000.networking)
  • Re: 2003 Web Server Security Flaw
    ... >> clicking on a file on a web site won't launch them. ... >other file associations. ... Same argument about secure passwords. ...
    (microsoft.public.inetserver.iis.security)