> We had a consultant come in who was proficient in coldfusion > web development look at our site. He suggested at first that > we require 128 bit security for the SSL portions of our site > using IIS. This ensures that people can't go to a form or > checkout page that is supposed to be ssl by changing the URL > on the address bar from https:// to http://. However, since > we have foreign customers who may not have a 128bit ssl > compliant browser, he suggested making two virtual (or real) > diretories, marking one in IIS as requiring SSL and the other > as requiring SSL with 128bit encryption. > > I've created some virtual directories and done this. > However, I haven't been able to see if the 40bit virtual > directory works for those browsers. I downloaded the archaic > version of Netscape 3.04 (40 bit ssl version) but the CGI > variables: HTTPS_KEYSIZE and CERT_KEYSIZE both say 128 bit. > I'm not sure if these are even variables I should be looking > at for this. > > What I need to do is detect whether the client browser has 40 > bit or 128 bit. If they have 40 bit, send them to the > directory that requires ssl only. If they have 128 bit, send > them to the directory that requires that. Not sure how to > test or implement this.
If you're not going to require all users to use 128-bit encryption, why bother with two parallel directories? Why not just set up one that requires SSL - people with browsers that support 128-bit encryption will use it, while those that don't, won't. Alternatively, you might want to look at the "supercerts": http://www.thawte.com/html/RETAIL/sgc/index.html I don't know the details, exactly, for how these work, but basically, it allows the use of 128-bit encryption over browsers using Server Gated Cryptography (40- and 56-bit certs). These certificates are quite a bit more expensive, though. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm
