ASP.NET and HTTPS

Question

We're looking at using HTTPS in our ASP.NET webforms application for a shopping cart section. I have read somewhere that we will need to write code to check if the users' browser/device has encryption to avoid it falling over?

Is this the case, if so can you point me in the direction of what sort of namespaces/blogs etc I should be looking at?

Any help appreciated.

Answer 1

I recommend turning on SSL and seeing what breaks. Usually nothing. However, there are many edge cases, such as components that try to load from http:// instead of https://

Most of the relevant configurations will be in IIS or the web.config file. You will need to set several attributes especially if you using forms authentication or the ASP.NET membership feature.

Here is one link to start your reading.

Answer 2

This codeproject article - http://www.codeproject.com/KB/aspnet/WebPageSecurity.aspx - is likely worth a read.

Answer 3

I think you may be referring to the 40 bit/128 bit encryption question, which used to be an issue up to IE 5.5. I don't think this should be a concern today. See the Verisign FAQ for some basic info about SGC certs.