Re: [ADVANCED-DOTNET] HTTPS

2008-05-20 Thread Geoff Taylor
0 +0100> From: [EMAIL PROTECTED]> Subject: Re: > [ADVANCED-DOTNET] HTTPS> To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM> > > I > thought there was a 'require SSL' option somewhere in IIS, but I can't> > > find it now so maybe I was thinking of Apache or som

Re: [ADVANCED-DOTNET] HTTPS

2008-05-20 Thread Paul Cowan
Having this selected will only redirect the page to the appropriate HTTP error page when you try and request the page over HTTP.I needed to write an HTTP handler to do the [EMAIL PROTECTED]> Date: Tue, 20 May 2008 12:47:50 +0100> From: [EMAIL PROTECTED]> Subject: Re: [ADVANCED-DOTNET]

Re: [ADVANCED-DOTNET] HTTPS

2008-05-20 Thread Dean Cleaver
2008 23:48 To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] HTTPS > I thought there was a 'require SSL' option somewhere in IIS, but I can't > find it now so maybe I was thinking of Apache or some other server... There is (assuming IIS6) Website or folder

Re: [ADVANCED-DOTNET] HTTPS

2008-05-20 Thread Chris Anderson
> I thought there was a 'require SSL' option somewhere in IIS, but I can't > find it now so maybe I was thinking of Apache or some other server... There is (assuming IIS6) Website or folder properties Directory Security tab Secure communications box -> Press Edit button Here you will find the

Re: [ADVANCED-DOTNET] HTTPS

2008-05-20 Thread James Geall
does this do what you want? http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx?mfr=true HTH James On Tue, May 20, 2008 at 8:31 AM, Geoff Taylor <[EMAIL PROTECTED]> wrote: > Hi, > > I thought there was a 'require SSL' option somew

Re: [ADVANCED-DOTNET] HTTPS

2008-05-20 Thread Geoff Taylor
Hi, I thought there was a 'require SSL' option somewhere in IIS, but I can't find it now so maybe I was thinking of Apache or some other server... Anyway, without that option my next choice would be IIS's wildcard redirection: http://support.microsoft.com/kb/324000 You set up a web site on port

Re: [ADVANCED-DOTNET] HTTPS

2008-05-19 Thread Adam Tuliper
You are saying if a user goes to one area that is http they must go to https - thats a redirect. the browser won't know it yet since the protocol is http, not https, so as far as I know, you need at least a redirect to tell the browser to handle ssl. if you did a server.transfer. you are internally

Re: [ADVANCED-DOTNET] HTTPS

2008-05-17 Thread John Warner
Warner > -Original Message- > From: Discussion of advanced .NET topics. [mailto:ADVANCED- > [EMAIL PROTECTED] On Behalf Of Shawn Wildermuth > Sent: Saturday, May 17, 2008 7:18 PM > To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM > Subject: Re: [ADVANCED-DOTNET] HTTPS > > Why is

Re: [ADVANCED-DOTNET] HTTPS

2008-05-17 Thread dagda1
I have a cert. not sure if I understand. I just don't like all these redirects. i'm curious if there is a better way. -Original Message- From: "Discussion of advanced .NET topics." === This list is hosted by DevelopMentorĀ® http://www.develop.com Vi

Re: [ADVANCED-DOTNET] HTTPS

2008-05-17 Thread Shawn Wildermuth
of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of John Warner Sent: Saturday, May 17, 2008 7:09 PM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] HTTPS Importance: Low Get a certificate. John Warner > -Original Message- > From: Discussion of ad

Re: [ADVANCED-DOTNET] HTTPS

2008-05-17 Thread John Warner
Get a certificate. John Warner > -Original Message- > From: Discussion of advanced .NET topics. [mailto:ADVANCED- > [EMAIL PROTECTED] On Behalf Of Paul Cowan > Sent: Saturday, May 17, 2008 6:25 PM > To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM > Subject: [ADVANCED-DOTNET] HTTPS > > Hi, > > I

Re: [ADVANCED-DOTNET] HTTPS + HTTP Mixture in a web application

2007-04-03 Thread Dave
ran Cobisi Sent: April 3, 2007 4:09 AM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] HTTPS + HTTP Mixture in a web application Hi Dave, Even if a "talented hacker" could always find a way to hijack your cookies (but this is another story...), you could at least

Re: [ADVANCED-DOTNET] HTTPS + HTTP Mixture in a web application

2007-04-03 Thread Efran Cobisi
Hi Dave, Even if a "talented hacker" could always find a way to hijack your cookies (but this is another story...), you could at least mark your cookies as secure, thus not allowing them to be sent over protocols different from https. FormsAuthentication provides an easy way to mark authenticatio