CODEWITHSUNDEEP
asp.nethttps
Fermin
Fermin

Reputation: 36111

ASP.NET and HTTPS

We're looking at using HTTPS in our ASP.NET webforms application for a shopping cart section. I have read somewhere that we will need to write code to check if the users' browser/device has encryption to avoid it falling over?

Is this the case, if so can you point me in the direction of what sort of namespaces/blogs etc I should be looking at?

Any help appreciated.

Upvotes: 1

Views: 520

Answers (3)

cdonner
cdonner

Reputation: 37708

I think you may be referring to the 40 bit/128 bit encryption question, which used to be an issue up to IE 5.5. I don't think this should be a concern today. See the Verisign FAQ for some basic info about SGC certs.

Upvotes: 1

Nate
Nate

Reputation: 30656

This codeproject article - http://www.codeproject.com/KB/aspnet/WebPageSecurity.aspx - is likely worth a read.

Upvotes: 3

MatthewMartin
MatthewMartin

Reputation: 33183

I recommend turning on SSL and seeing what breaks. Usually nothing. However, there are many edge cases, such as components that try to load from http:// instead of https://

Most of the relevant configurations will be in IIS or the web.config file. You will need to set several attributes especially if you using forms authentication or the ASP.NET membership feature.

Here is one link to start your reading.

Upvotes: 1

Related Questions