ASP.NET and SSL

From: Jaime Stuardo (jstuardo_at_manquehue.net)
Date: 11/06/05 

Date: Sat, 5 Nov 2005 23:18:07 -0300

Hi all..

I'm developing an extranet site using ASP.NET and IIS 5.0 under Windows
Server 2000.

Some information is very confidential so I need to implement some secure
mecanism in order to protect it while trasmitted over the network.

Should I purchase an SSL certificate such as Verisign or does .NET framework
provide a way to implement SSL comunications without the need of a
third-party component? I am new to .NET so I am wondering if .NET has a
built-in support for SSL. If it has, do you recommend to use it or do you
advice me to use a third-party certificate because it is more reliable?

Thanks
Jaime

Relevant Pages

  • Re: SSL Site Name Questions
    ... exchange.companyname.com and register it with the SSL Certificate -- correct? ... Just to verify that I understand correctly, I will need to register my SSL ... Also you do not have to have the www prefix to register a FQDN. ...
    (microsoft.public.exchange.admin)
  • Re: Exchange System Manager Error - The token supplied to the function is invalid ID
    ... E2K3 Public folder management - SSL certificate server name is incorrect ... when you view public folders in Exchange System Manager" ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange Server AS4.1 Error 85010014
    ... Check that you have the correct SSL certificate installed on your WM5 ... Does the "server" entry on the client match the SSL certificate name? ... > perfectly with the exchange server when SSL was not being used. ...
    (microsoft.public.pocketpc.activesync)
  • Re: SSL Certificate Error message
    ... The new SSL certificate I created is registered to gomydomain.com (regitered ... The SSL certificate server name is incorrect. ... Exchange System Manager ...
    (microsoft.public.exchange.admin)
  • Re: Need for encryption in WSE 3.0 if using SS-avoid man-in-middle
    ... if the other endpoint has a trusted and valid SSL certificate, he would see the data in cleartext. ... But if you let customers change the endpoint address they must be also able to change the server certificate for mutual authentication..so i don't see a real advantage to use additional message security - and you are in the same situation as with transport security. ... I plan on upgrading my .NET 2.0 web service to use WSE 3.0. ...
    (microsoft.public.dotnet.framework.aspnet.security)
Loading