Development Environment w/ssl

From: J. Shane Kunkle (shane_at_caudillweb.com)
Date: 12/10/04

  • Next message: ejstembler: "Strange security issue in WinForms application"
    Date: Fri, 10 Dec 2004 13:22:35 -0500
    
    

    Hello,

    We have an existing web application that we are modifying to contain
    sensitive, private user data. To secure the app as much as possible we
    would like to use ssl for the pages that display/edit this data.

    The production server is not as much of a worry at this point - however I am
    worried about testing and developing this application on our developer's
    machines. Our developers all develop locally (local copy of VS.NET, local
    web server, local database sql2000) on each of their machines - all the code
    is stored in a single Visual Source Safe server.

    What are the best practices to develop a partial ssl web application in this
    environment? Should we even worry about ssl at this point? Are
    certificates necessary? Does anyone know of any resources, links, etc?

    Any advice, articles or direction is much appreciated. Thanks in advance,
    Shane Kunkle
    jkunkle@vt.edu


  • Next message: ejstembler: "Strange security issue in WinForms application"

    Relevant Pages

    • Re: Development Environment w/ssl
      ... > sensitive, private user data. ... > would like to use ssl for the pages that display/edit this data. ... > machines - all the code is stored in a single Visual Source Safe server. ... If you need to issue certificates for the dev machines, ...
      (microsoft.public.dotnet.security)
    • Re: OWA
      ... Why did he make big fuss about the form authentication over SSL? ... do NOT put an Exchange server in the DMZ. ... what to all, which machines can tak to what other machines, etc. make ...
      (microsoft.public.exchange.admin)
    • Re: ssl very slow
      ... The server we're using for testing is an antique. ... testing with these type of machines, it I can get it to run well on that ... I think the SSL performance hit is on the mobile ...
      (microsoft.public.dotnet.framework.aspnet.mobile)
    • Most users cant connect to our SSL-- help!
      ... I've included all relevant SSL settings from our ... Subject: Large percentage of customers cannot connect to https: ... server, which then grinds indefinitely. ... "2) Your secure order form is not working. ...
      (comp.security.misc)
    • Most users cant connect to our SSL-- help!
      ... I've included all relevant SSL settings from our ... Subject: Large percentage of customers cannot connect to https: ... server, which then grinds indefinitely. ... "2) Your secure order form is not working. ...
      (comp.security.ssh)