https

iPhone HTTPS

Hi everone, I'm interested in iPhone HTTPS through NSURLConnection, it's possible to send a request, respond to a challenge and load the secure URL. Is there anything else that can be done with NSURLConnection via HTTPS? Thank you in advance! ...

Redirect loop during http:// to https:// redirect

I am trying to force a page to be run under SSL, so I have implemented the following on page_load: if (!Request.IsLocal && !Request.IsSecureConnection) { Response.Redirect(Helper.GetInstance().SSLBaseURL() + ScriptName()); } For some reason this is ending up in a loop. Earlier today, I checked Request.Uri....

ASP.NET and HTTPS

We're looking at using HTTPS in our ASP.NET webforms application for a shopping cart section. I have read somewhere that we will need to write code to check if the users' browser/device has encryption to avoid it falling over? Is this the case, if so can you point me in the direction of what sort of namespaces/blogs etc I should be loo...

Mercurial push, abort: authorization failed.

I'm having problems with pushing to mercurial repository: $ hg push pushing to https://user:***@hg.domain.com/X_repo searching for changes abort: authorization failed The same URL (with the same credentials) is accessible through the web browser. Also, I tried it without embedding usr+pass into the URL. HTTPS is correctly configured,...

calling a web service using WCF over Http and Https

I know little about WCF so please bear with me! In our project we have a java web service that runs over http and https. We want to use http internally and https for the external version of our web app. So we've created the proxy class in our application and we have setup the binding for http in the web/app.config and all works fine. ...

Screen scraping over SSL with .NET

What solutions exist for screen scraping a site over SSL for use with .NET? My use case is that I need to login to a partner website (https), navigate through a dynamic hierarchy, and download a zipped file of reports. I certainly could use other screen scrapers if there are no good viable options in .NET, either though the framework o...

Logging into a corporate captive portal with a native iPhone app

I am working on a native iPhone app that needs to be able to automatically (in the background) sign into a captive portal on a company's large WiFi network before accessing the net. The captive portal is a simple HTTPS page with username and passsword form that authenticates then allows access to the Internet. The hope is that the user...

Plain text password over HTTPS

I'm currently working on a PHP OpenID provider that will work over HTTPS (hence SSL encrypted). Is it wrong for me to transmit the password as plain text? HTTPS in theory, cannot be intercepted, so I don't see anything wrong. Or is this unsafe at some level and I'm failing to see this? ...

swf https problem with IE

Hi there! I'm using a flash mp3 player (www.premiumbeat.com) within my website (localhost:8084 - tomcat). This is my situation: In my site I have secure files (any file under /mywebapp/secure) and public files (everything outside /mywebapp/secure). Secure files are served through https (port 8443) the mp3 player is located at: /mywebap...

RichFaces on Secure Site

Has anyone used RichFaces on a secure site? I'm using the following: Tomcat 6 RichFaces 3.3.1 (also tried 3.1.4.GA) intermediate certificate My application is using the Rich panel bar. When using HTTPS, only the panel labels are rendered and I get the following JavaScript error: 'RichFaces' is undefined This is the JavaScript creat...

Determine if site is running HTTPS

What would be the easiest way to see if the site is in HTTPS? I am using c# ...

Encryption of HTTPS headers

To what extent, if at all, are HTTPS headers encrypted? ...

Mock SSL HttpRequest for Unit Testing

I'm trying to mock out an SSL HttpRequest but I'm having trouble figuring out how to set the protocol to HTTPS in the request object. I got started from an example from Phil Haack here: http://haacked.com/archive/2005/06/11/simulating_httpcontext.aspx Is there a way to set the request to SSL? public class MockHttpRequest : SimpleWorke...

Good practice or bad practice to force entire site to HTTPS?

I have a site that works very well when everything is in HTTPS (authentication, web services etc). If I mix http and https it requires more coding (cross domain problems). I don't seem to see many web sites that are entirely in HTTPS so I was wondering if it was a bad idea to go about it this way? Edit: Site is to be hosted on Azure c...

HTTPS connection in iphone

How to connect to https url from iphone application ? Is there any sample code available? Thanks & Regards, Yogini ...

Separate ASP.NET session ids for http and https

I'm working on a website that uses a non-secured asp.net session cookie. The session is shared between http and https. We want to use different sessions for http and https (because of security reasons). Is this configurable in ASP.NET, the httpCookies config element in system.web isn't specific enough. I'd rather not programatically bui...

Cookie & Https

I'm trying to write a cookie in ASP.NET under https, but I see a plain text cookie in the client machine. Shouldn't the cookie be encrypted by default under an https connection? ...

How to create a SSL connection in Websphere

Hi, I'm trying to figure to do a easy secure connection in rad 7.5 for my application. Don't want to install http server with openssl. Is it possible to doing it directly in WAS? ...

Why does Request.IsSecureConnection return false when true is expected.

I have an aspx page which is checking Request.IsSecureConnection to ensure it is true, if not it does a redirect to the the secure page at https://www.domain.com/page.aspx. The server has an SSL cert installed for the domain, and the browser shows the padlock icon. The same code ran fine on a different server, but now Request.IsSecureC...

Are valid digital certificates required on the clients (Java, C++ etc) to make successful https connections?

I am planning to implement a small standalone program that will make a https request to a server. Does that require a valid ssl certificate in the client? How does the SSL handshake work in that case? Are there any security issues in the client not have an SSL certificate? ...