Velocity Reviews - ASP.NET & SSL

Velocity Reviews (http://www.velocityreviews.com/forums/index.php)

- ASP .Net Security (http://www.velocityreviews.com/forums/f62-asp-net-security.html)

- - ASP.NET & SSL (http://www.velocityreviews.com/forums/t765751-asp-net-and-ssl.html)

I have an app in C#/ASP.NET 1.1 on a Win2003 server.
Now I'm trying to make it use SSL, so I requested and
installed a server certificate to IIS.
But now I have some questions:
1) if I force my web-site to use SSL, and I request a page
via SSL, in IE a warning appears telling that the page
contains protected object and non protected object, but
how is it possible, if I force https? How can I make this
warning disappear?
2) I would like to force https to all my objects; for
example I'd like images, css, javascript and plain htm to
be trasmitted not crypted. So I thought of using an
HttpHandler that redirect http calls of aspx/asmx to https
and https calls to other object to http. Is it possible?
Or there is a better solution to this optimization?
Thanks, Damiano Curia

Re: ASP.NET & SSL

Hi,

To avoid the warning you need to either:
a) change the browser settings (not possible if you do not control the
browser)
-or-
b) all resources in a webpage (eg images, CSS, external javascript files,
flash files) need to be referenced using HTTPS not HTTP. So if you have:

<img src="http://www.myserver.com/image.jpg">

you will get an error you see. You need to use:

<img src="/image.jpg">

Cheers
Ken

"Curia Damiano" <curiad@euroforex.com> wrote in message
news:bbcb01c3ec99$9572b560$a501280a@phx.gbl...
: I have an app in C#/ASP.NET 1.1 on a Win2003 server.
: Now I'm trying to make it use SSL, so I requested and
: installed a server certificate to IIS.
: But now I have some questions:
: 1) if I force my web-site to use SSL, and I request a page
: via SSL, in IE a warning appears telling that the page
: contains protected object and non protected object, but
: how is it possible, if I force https? How can I make this
: warning disappear?
: 2) I would like to force https to all my objects; for
: example I'd like images, css, javascript and plain htm to
: be trasmitted not crypted. So I thought of using an
: HttpHandler that redirect http calls of aspx/asmx to https
: and https calls to other object to http. Is it possible?
: Or there is a better solution to this optimization?
: Thanks, Damiano Curia