I never thought about this before but if your web controls are not html.encoded but your view state is encrypted
ViewState, by default, is not encrypted -- it's only base64 encoded.
GMann
does the fact the site has a SSL provide "additional" ?
SSL provides 1) confidentiality, 2) integrity and 3) authentication.
confidentiality means the channel between the browser and server is encrypted and no eavsedroppers on the shared netowrk doing packet sniffing can read the data.
integrity means that the bits being sent from the client to the server and from the server to the client can be modified without detection. so an eavsedropped can't change packets in transit.
authentication means that the client knows that the server is the right server (and optionally the server knows the client is the client). when you enter your username/password (or credit card number or anything else sensitive into the browser) that you
know you really are sending it to a server you know and trust.
GMann
Member
406 Points
519 Posts
How protection does SSL provide to a web site ?
Nov 08, 2012 10:54 PM|LINK
HI;
I never thought about this before but if your web controls are not html.encoded but your view state is encrypted
does the fact the site has a SSL provide "additional" ?
I know of no e-commerce site that doesn't use SSL to "try"
and protect it's transactions.
Thanks for your thoughts !
BrockAllen
All-Star
27544 Points
4907 Posts
MVP
Re: How protection does SSL provide to a web site ?
Nov 09, 2012 02:17 AM|LINK
ViewState, by default, is not encrypted -- it's only base64 encoded.
SSL provides 1) confidentiality, 2) integrity and 3) authentication.
confidentiality means the channel between the browser and server is encrypted and no eavsedroppers on the shared netowrk doing packet sniffing can read the data.
integrity means that the bits being sent from the client to the server and from the server to the client can be modified without detection. so an eavsedropped can't change packets in transit.
authentication means that the client knows that the server is the right server (and optionally the server knows the client is the client). when you enter your username/password (or credit card number or anything else sensitive into the browser) that you know you really are sending it to a server you know and trust.
DevelopMentor | http://www.develop.com
thinktecture | http://www.thinktecture.com/
Shailendra S...
Member
551 Points
145 Posts
Re: How protection does SSL provide to a web site ?
Nov 09, 2012 02:43 PM|LINK
www.techaray.com