Forms Authentication and requireSSL, what's the recommended best practice

From: mikemad (maddoxm_at_comcast.net)
Date: 01/26/05 

Date: 26 Jan 2005 00:53:44 -0800

I have an ASP.NET 1.1 Web app and am now implementing SSL. It used
forms authentication. Everything works fine but I get unexpected(by me)
behavior when I set the requireSSL in the config file.

My scenario is, I want to login securely in a secure directory and then
redirect to the home page of the site. Pretty standard. If they are
logged in, then display a header bar with a few menu items such as
"Profile", etc. I am checking the Request.IsAuthenticated and if it is
true, I show the header bar. Well, IsAuthenticated is false when I'm
not under the SSL directory so it doesn't display my header bar. What's
the recommended way of doing this kind of common operation. I could
just set a Session variable when I login and display the menu if that
session variable is set. Is there a better way??
Thanks,

Mike Maddox
Creative Journey Consulting

Relevant Pages

  • Finding nonsecure items in secure page
    ... I am modifying an existing ASP.NET application to make it SSL ... Do you want to display the nonsecure items? ... IS there something other than a reference through an explicit "http:" ... Hasn't someone built a plugin for IIS that would allow for monitoring ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: IE 6 displays blank page
    ... At first, clearing SSL state helped. ... See Internet Explorer 6.0 Service Pack 1 may display a blank Web page after you select Auto-Select encoding ... Choose 'Extract One File From Installation Disk' ("Expand File" for WinXP). ... Next to 'Restore From', type in or browse for the file's location, which is probably in the Win98 folder of your installation CD-ROM, or in your Windows\Options\Cabs folder, as the case may be. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: IE "This page contains both secure and nonsecure items..." Warning
    ... What I'm curious about is how your using SSL for SharePoint in production. ... > display a lengthy "what's happening this week" or similar page. ... > is stored WITHIN the team site WITHIN its own Shared Documents. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: email problems
    ... Page Cannot Be Displayed Error During SSL 3.0 Server Session Timeout ... Troubleshoot Situations Where You Cannot Complete MSN Sign-up pr Connect to SSL ... Secure Web Site ... "Cannot display page" message appears. ...
    (microsoft.public.windowsxp.help_and_support)
Loading