>It really isn't soemthing you have to do with your code. Well, that isn't entirely true.
You do have to call the https:// via absolute path when invoking an crypted page or have the application redirect to https if you want the entire thing / certain pages to be encrypted. Also, you have to make sure that paths are relative so that things like images and style sheets don't cause SSL errors such as the "not all items are encrypted" prompt. Also, if your SSL site is in another area (changes domains), you have to carry the urltoken to ensure session data is picked up on the other end. I am not even going to get into client side SSL validation and presentation and the java cert store. That's a beast of its own. --Phillip -----Original Message----- From: Teddy Payne [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 20, 2006 1:06 PM To: CF-Talk Subject: Re: user accounts and passwords Richard, It really isn't soemthing you have to do with your code. It is a web space option. It provides encryption of data so that when you submit a password, the the submissions is encrypted typically at 128 bit encryption. I believe you can get more and less encryption, but 128 is still pretty standard and a lot of shared hosting environment offer shared certificates. Teddy On 12/20/06, Richard White <[EMAIL PROTECTED]> wrote: > > >You may also want to ensure the password process is protected by SSL > >otherwise the entry of your password is sent in clear text. > > oh i see, yes i hadn't thought about that, i haven't heard of SSL but > will look into it. Or can you provide a simple example of how i can do this? > Thanks teddy, appreciate your help > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Create robust enterprise, web RIAs. Upgrade & integrate Adobe Coldfusion MX7 with Flex 2 http://ad.doubleclick.net/clk;56760587;14748456;a?http://www.adobe.com/products/coldfusion/flex2/?sdid=LVNU Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:264651 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
