Re: Are http links after signing in with https secure?

From: Jim Harrison [MSFT] (jmharr_at_online.microsoft.com)
Date: 04/28/04

  • Next message: Jim Harrison [MSFT]: "Re: Eliminate need for s in https URL" 
    Date: Tue, 27 Apr 2004 20:34:05 -0700

    With the exception of client cert authentication, protocol and authentication methods are completely separate issues.
    A client will provide credentials according to the auth methods offered by the server (ISA in this case). 

    -- 
 Jim Harrison [ISASE]
 Read the help, books and articles!
 This posting is provided "AS IS" with no warranties, and confers no rights.
"SizzleMaster" <larry@datasculpting.com> wrote in message news:%23OpU2zLLEHA.4032@TK2MSFTNGP10.phx.gbl...
So once they've authenticated via the https and then click a link in the
site that is http the authentication info is forwarded again.  You're
probably not saying that but I'm just checking.
Thanks.
"Jim Harrison [MSFT]" <jmharr@online.microsoft.com> wrote in message
news:uXvaN7KLEHA.3944@tk2msftngp13.phx.gbl...
> HTTP requests are not secure; only those made using HTTPS.
> If IIS only accepts SSL requests, then those links using HTTP will fail.
>
> -- 
>  Jim Harrison [ISASE]
>  Read the help, books and articles!
>
>  This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "SizzleMaster" <larry@datasculpting.com> wrote in message
news:e3cXSI%23KEHA.3880@TK2MSFTNGP09.phx.gbl...
> I've setup SSL on several web published sites. The site has all of its
links
> pointing to http://.... If I force SSL in IIS, what are the ramifications.
I
> would like to avoid having to use the s but still remain secure. Is there
a
> way?
>
> Thanks for any help.
>
>
>
  • Next message: Jim Harrison [MSFT]: "Re: Eliminate need for s in https URL"

    Relevant Pages

    • Re: Forms Authentication with http/https
      ... If you still want to switch to http (althought I would not recomend you ... > FormsAuthentication.RedirectFromLoginPage methods redirects to original ... > protocol is still SSL and not just http as expected. ... Site B - An application which does authentication which is https based ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: How do I authenticate a UNIX account in IIS 6?
      ... The ASP page requires some kind of HTTP based authentication, ... the script you have on your Unix box uses some kind of HTTP GET ... :> a) Do you want to give the Unix account permissions to the folder? ...
      (microsoft.public.inetserver.iis.security)
    • Re: HELP! SMTP for IMAP stopped working
      ... in for the initial setup to get the RPC over HTTPS ... computer using RPC over HTTP. ... If the authentication was unsuccessful wouldn't I get an error? ... outside of the company I get "unable to relay for joe@xxxxxxx" I ...
      (microsoft.public.exchange.setup)
    • RE: Certificate names and RPC over HTTP for Exchange 2003
      ... I can't remember why I went back to HTTP based before, ... names were getting crossed in the RPC call on my ISA server. ... Every ISA ... set authentication to Basic ...
      (microsoft.public.isa.configuration)
    • RE: RPC over HTTPS and basic vs NTLM authentication
      ... I enabled ONLY basic authentication on the RPC ... Outlook will identify if it is running on a fast or slow ... Clear - 'On fast networks, connect using HTTP first, then connect using ...
      (microsoft.public.exchange.connectivity)