I have pages, such as LogOn.aspx, Payment.aspx that enforces the use of SSL.
Every single one of my page embeds a header and menu server controls - which
have links to other pages that do not require SSL.
In the LogOn.aspx, it automatically detects in the page_load event (using
URL.Scheme property) whether SSL is running, and if not, redirect to itself
and replaces http by https in the url. This part runs fine.
However, all the other links on the logon page (including those on the menu
and header server controls) now have https rather than http as the URL
scheme. Is there anyway to get around it? The other pages do not require SSL
at all.
The method I have come up with is to turn all links into server controls,
and then modify its href property in Page_Load event. I think this adds way
too much unnecessary overhead. Is there any easier way of getting around it?
An alternative question is: if the whole site runs on SSL (i.e., I will not
stop turning SSL links into non-SSL links), is this going to cause any major
issues in terms of server load?
Another related question is whether SSL is necessary for LogOff.page. I use
FormsAuthentica tion (roll my own security).
A
2  1832 
"CW" wrote: However, all the other links on the logon page (including those on the menu
and header server controls) now have https rather than http as the URL
scheme. Is there anyway to get around it? The other pages do not require SSL
at all.
The way I do it, is to use absolute links everywhere, but without the protocol://hostname part. E.g. /home.aspx.
That means that I don't need to do any server-side processing of my navigation structure.
Once the person gets on to the SSL-version of the site, then they'll stay on SSL for any links that they follow, as all the links start with / . Whether this is a problem probably depends on the next question.
An alternative question is: if the whole site runs on SSL (i.e., I will not
stop turning SSL links into non-SSL links), is this going to cause any major
issues in terms of server load?
It has never been an issue for me, but obviously it depends on your site traffic and hardware. SSL requires more processor time for the encrypt / decrypt. You can buy dedicated hardware to do this also.
Another related question is whether SSL is necessary for LogOff.page. I use
FormsAuthentica tion (roll my own security).
Probably not, unless you give your users the option that their FormsAuth cookie is SSL only, in which case it'll only be set / removed while they are on the https:// server.
Kirk
Thanks for the help
"Kirk Jackson" <Kirk Ja*****@discuss ions.microsoft. com> wrote in message
news:D1******** *************** ***********@mic rosoft.com... "CW" wrote: However, all the other links on the logon page (including those on the
menu and header server controls) now have https rather than http as the URL
scheme. Is there anyway to get around it? The other pages do not require
SSL at all.
The way I do it, is to use absolute links everywhere, but without the
protocol://hostname part. E.g. /home.aspx.
That means that I don't need to do any server-side processing of my
navigation structure.
Once the person gets on to the SSL-version of the site, then they'll stay
on SSL for any links that they follow, as all the links start with / .
Whether this is a problem probably depends on the next question. An alternative question is: if the whole site runs on SSL (i.e., I will
not stop turning SSL links into non-SSL links), is this going to cause any
major issues in terms of server load?
It has never been an issue for me, but obviously it depends on your site
traffic and hardware. SSL requires more processor time for the encrypt /
decrypt. You can buy dedicated hardware to do this also. Another related question is whether SSL is necessary for LogOff.page. I
use FormsAuthentica tion (roll my own security).
Probably not, unless you give your users the option that their FormsAuth
cookie is SSL only, in which case it'll only be set / removed while they are
on the https:// server.
Kirk This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: lothar |
last post by:
re:
4.2.1 Regular Expression Syntax
http://docs.python.org/lib/re-syntax.html
*?, +?, ??
Adding "?" after the qualifier makes it perform the match in non-greedy or
minimal fashion; as few characters as possible will be matched.
the regular expression module fails to perform non-greedy matches as
described in the documentation: more than "as few characters as possible"
|
by: Mario |
last post by:
Hello,
I couldn't find a solution to the following problem (tried
google and dejanews), maybe I'm using the wrong keywords?
Is there a way to open a file (a linux fifo pipe actually) in
nonblocking mode in c++? I did something ugly like
--- c/c++ mixture ---
mkfifo( "testpipe", 777);
|
by: Ravi Singh (UCSD) |
last post by:
Hello all
Attached is a simple HTML file that adds and delete rows. In the add
row function I set an attribute "onClick" this triggers the
testMessage() function. When I try this in Firefox it works just fine
however on IE it just refuses to work.
What is interseting is the ROW that already exists has a similar
'onClick' event which works when the page is loaded, but subsequent
"row" additions to the table to not work in IE.
|
by: Markus Ernst |
last post by:
Hi
I wrote a function that "normalizes" strings for use in URLs in a UTF-8
encoded content administration application. After having removed the accents
from latin characters I try to remove all non-word characters from the
string:
// PCRE syntax:
$string = preg_replace("/(+)/", "-", $string);
|
by: Adrian Herscu |
last post by:
Hi all,
In which circumstances it is appropriate to declare methods as non-virtual?
Thanx,
Adrian.
| | |
by: Patrick Kowalzick |
last post by:
Dear all,
I have an existing piece of code with a struct with some PODs.
struct A
{
int x;
int y;
};
|
by: Academic |
last post by:
I have a MDI form, sometimes child forms and sometimes forms that are
neither
If I close the app the child forms closing and closed event happens followed
by the Mdi form receiving the events..
But the regular forms that are also open do not receive that event. This is
true whether there are child forms open or not.
|
by: =?UTF-8?B?Ik1hcnRpbiB2LiBMw7Z3aXMi?= |
last post by:
PEP 1 specifies that PEP authors need to collect feedback from the
community. As the author of PEP 3131, I'd like to encourage comments
to the PEP included below, either here (comp.lang.python), or to
python-3000@python.org
In summary, this PEP proposes to allow non-ASCII letters as
identifiers in Python. If the PEP is accepted, the following
identifiers would also become valid as class, function, or
variable names: Löffelstiel,...
|
by: Fabian Wein |
last post by:
Hi,
is there a way to call a const function from non const function?
I have a non-const
List GetList();
and want my
|
by: George2 |
last post by:
Hello everyone,
I am debugging MSDN code from,
http://msdn2.microsoft.com/en-us/library/0eestyah(VS.80).aspx
here is my output,
1>main.cpp
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
| | |
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed.
This is as boiled down as I can make it.
Here is my compilation command:
g++-12 -std=c++20 -Wnarrowing bit_field.cpp
Here is the code in...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth.
The Art of Business Website Design
Your website is...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
| | |
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
| |
