Security

Re: Securing sites - classic asp - .Net 1.1, .Net 2.0, and .Net 3+

naziml — Wed, 15 Oct 2008 01:37:31 GMT

You can use IIS config to redirect instead of the application doing it. Here's how you set this up for IIS6: http://technet.microsoft.com/en-us/library/cc736641.aspx

Re: Securing sites - classic asp - .Net 1.1, .Net 2.0, and .Net 3+

mybestguess — Tue, 14 Oct 2008 17:20:57 GMT

Thank you. I know about the certificates but I didn't know if there was an easier solution. We have 7 certificates for 7 domains and on 3 of those domains, there are 20+ sites that need to have SSL enabled.

The only problem I saw with that is there will be a lot of custom code entered to handle redirects to https and I didn't know if there was an easier way to handle the redirect instead of custom coding each of the 75+ sites?

Re: Securing sites - classic asp - .Net 1.1, .Net 2.0, and .Net 3+

jeff@zina.com — Tue, 14 Oct 2008 11:07:08 GMT

mybestguess:
If you have any suggestions regarding the best way to add SSL to existing sites please let me know.

Install the certificate and check the Require Secure Connections box.

Jeff

Securing sites - classic asp - .Net 1.1, .Net 2.0, and .Net 3+

mybestguess — Mon, 13 Oct 2008 18:54:58 GMT

It as been the recent task of our team to come up with both short and long term solutions to the concern of SSL security on our sites.

The first solution off the top of the head is to do 1 of the following 2. Either take the pain and time consuming option of coding each individual website to rediret to https to use ssl. The second approach would be to have IIS force a redirect to the https and www paths.

The catch is what would be the best approach. I am thinking of a quick and easy temporary solution first. Then a long term solution. But the long term solution has a catch. In the next few months (early - Mid 2009) we are moving to Server 2008 with IIS7 and that may negate the changes necessary in IIS6.

Any and all suggestions are appreciated on this matter. If you have any suggestions regarding the best way to add SSL to existing sites please let me know. I would like to try and avoid a manual reprogramming of that many websites. Thank you

MBG