Re: secure binding
Re: secure binding
- Subject: Re: secure binding
- From: "Cheong Hee" <email@hidden>
- Date: Wed, 5 May 2010 16:32:24 +0800
Just to ensure i don't pretend to understand well...
What are the headers of each page, you meant session headers or some
attributes defined for secured pages?
You need to check the headers on each page that should be SSL protected
to ensure that access was from an https URL. If not, redirect to the
https version or show an error message. Otherwise, yes, the user could
access the secure parts in an unencrypted manner.
Chuck
Cheers
Cheong Hee
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden