Re: Require SSL settings slows connection to Web Server

From: Bernard (qbernard_at_hotmail.com)
Date: 09/11/03 

Date: Thu, 11 Sep 2003 14:55:45 +0800

You can browse via https without the SSL cert ?
can you confirm this ? are you browsing the correct site ?

and next, is this your internal cert or public commercial certs ? 

-- 
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...
"Bruce Forbes" <bruce_forbes@oycbre.com> wrote in message
news:017901c377c7$10762000$a401280a@phx.gbl...
> We have a web site that we have the "Requires Secure
> Channel" setting selected.  I noticed it is very slow (20-
> 30 seconds) before you see the certificate request
> window.  When I remove teh SSL requirement for this site
> and then open the browser, still using HTTPS, the window
> pops up immediately.  I've checked and unchecked this a
> number of times to confirm and it appears that this
> setting definietly slows the initial connection even
> though we allways connect HTTPS.
>
> Runing IIS5 on Win2000 SP4
>
> Has anyone else seen this?  Does anyone know of a fix?

Relevant Pages

  • Secure site info
    ... Using 5.2.3 how can I check info on an SSL cert under https? ... On a PC under right click there is an option to view the cert. ... Years ago on Mac I think I remember that I used to be able to double click ...
    (microsoft.public.mac.explorer)
  • Re: is http mail secure?
    ... Can't I create a cert without going to ... > then use https. ... > Properties of the Virtual Site, selecting the Security tab and clicking on ... >> lock at the bottom telling me it's secure. ...
    (microsoft.public.exchange.connectivity)
  • Re: Https mix up.........
    ... > I have a 2000 server that has several websites in IIS. ... One website has https pages and has been up ... When I view the cert it is the ...
    (microsoft.public.inetserver.iis)
  • Re: [Full-disclosure] Expired certificate
    ... chort or whatever your name is, some of us know what we're doing and ... Certificate authorities notify their customers well in advance ... ssl cert from a certificate authority in my opinion and maybe a few ...
    (Full-Disclosure)
  • Re: outdated ssl cert
    ... [e.g. he already accepted the cert one time, ... ..I mean does an outdated self-signed certificate give the same security ... Using https even with certs that don't provide identity assurance, ... passive attack, you need to do an active man in the middle attack. ...
    (Fedora)