Try this blog, I think it would be perfect for your situation: http://www.west-wind.com/WebLog/posts/59731.aspx Nayden

This is excatly what I have been doing for a few years, A collegue and I are in the middle of writing it up as a high level design, hopefully if we can remove the corporate references we will publish this as a paper but a few thing to note so far are We use CIFS (windows shares on sep file server for...

If I want to force SSL v3 for all browser connections to my web server, how would I do that?

I'm hosting multiple web sites on a single server. As a security baseline I assigned a dedicated application pool for every site, each running its own user account for application pool identity. I also want to use Kerberos authentication with all my sites. So, to make Kerberos work, I have to register...