Joel Firestone wrote:
> Well, if I understand it correctly, the SSL secures the data being
> transferred.
> If you only use it on the action page, and not the submission itself, the
> data going from form.cfm to action.cfm would not be secure. But if form.cfm
> is in SSL, then it would be secure.

That would be incorrect.

It goes as follows:

The user enters the data into the form.
The browser compiles this to a bunch of data to send
The browser contacts the server on which the actio file resides
The browser sees it needs to use SSL as the action file is on a secure 
server
The browser sends the data over the encrypted connection

So any data sent to a file on a SSL secured server will be encrypted. 
data coming FROM a secure connection and going to a unsecure connection 
however is therefor NOT safe.

Jesse


______________________________________________________________________
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to