Re: http / https
Re: http / https
- Subject: Re: http / https
- From: Kieran Kelleher <email@hidden>
- Date: Wed, 7 Mar 2007 07:54:28 -0500
I'm short on time to say much right now, but the strategy is
something like this:
Each page needs a flag to tell whether it is secure or not secure.
isSecure = true or false.
in appendToResponse, check the protocol of the incoming request
compared to what the page wants to be returned as.
If we need to switch, then switch using a redirect. Like I said, go
study the section in Chuck's book about http/https switching and then
ask questions when if you get confused.
On Mar 7, 2007, at 7:45 AM, WIESEN Bruno wrote:
Hello,
I made a WebObjects application (thanks to kieran Kelleher) which
can switch between http/https - https/http...It works well, if
somebody tries to get a page without the "s" of https,
automatically the page is generated using https...
But if somebody goes to https://example and then removes the "s"
and refresh the page, the page is no longer secured...
To me, It is not very important because who wants to desecure
himself??But perhaps do you have something to say about that??
Thank you.
Bruno.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
40mac.com
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
References: | |
| >http / https (From: WIESEN Bruno <email@hidden>) |