Re: SSL versus logon

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Torben Broendum (anonymous_at_discussions.microsoft.com)
Date: 09/14/04 

Date: Tue, 14 Sep 2004 07:14:07 -0700

....even you cannot see the yellow icon (cannot remember
the english word for it) when you send the logon
informations and the icon first become vissible after the
logon procedure?

Torben Broendum

>-----Original Message-----
>If you e.g. enter https:// in your URL and you setup SSL
certificate then
>SSL is established before username and password is sent.
>
>What you can do for additional security is
enable "Require secure channel
>(SSL)". This way IIS server will require any user
accessing OWA to use SSL
>and will not allow insecure connection. I also usually
block any access from
>Internet to the server over TCP port 80 and allow only
port 443...
>
>Description of the Secure Sockets Layer (SSL) Handshake
>http://support.microsoft.com/default.aspx?scid=kb;EN-
US;257591
>
>Mike
>
>"Torben Broendum" <anonymous@discussions.microsoft.com>
wrote in message
>news:09b901c49a62$0a052b80$a601280a@phx.gbl...
>> Hi,
>>
>> On a win2Ksrv I use SSL connecting to OWA. Is the SSL
>> connection active at the time when I type the user id
and
>> user password - or is the mentioned send in clear text.
>>
>> If the last mentioned is correct - how the to prevent
the
>> clear text regarding id and password - before the SSL in
>> functioning "correct"?
>>
>> Regards, Torben Broendum
>
>
>.
>

Relevant Pages

  • RE: Support Code 0x80072F17
    ... > How do I disable any of the SSL connection between Exchange and PDA? ... > Anthony Capstick ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW with no https
    ... I do not consider a:8080 a url that is appropriate for a SSL end user connection. ... So just so we are all clear, RWW HAS to go over HTTPS. ... Even if I do https but port 8080 would not matter ...
    (microsoft.public.windows.server.sbs)
  • Re: [Full-Disclosure] idea (quite a bit off-topic, but....)
    ... it is functionally equivilent to just opening a single connection. ... with the symmetric key you got from the server, and send it UDP to a fixed ... After a random number of packets, reconnect with ssl, assert the unique id ...
    (Full-Disclosure)
  • Re: SSL clients not working from Windows XP
    ... Determine If SSL Connectivity Is Not Working on the Web Server or on ... >>> To check your connection settings, click the Tools menu, ... >>> and then click Internet Options. ... >>> discover network connection settings. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Entourage 2004 + SSL + load balancer = corrupt attachments
    ... Whenever we use SSL encryption ... The attachments are sent fine if a non-SSL connection ... Change the preferences in Entourage so that attachments are set to be ...
    (microsoft.public.mac.office.entourage)