Implementing SSL

[smack1]

I need some help implementing SSL on my site. I understand that it is a good practice to encrypt login forms and validation processes to prevent passing usernames and passwords unprotected across the web.

What I’m looking for is how to implement it. I think I only need to have one directory with these templates. Will it have to be outside of my web root to be referred to via HTTPS? How can you set and pass session variables, etc.

I guess I just need some direction on data flow. I have not found any type of documentation on this or best practices. Any advice or links will be appreciated.

I am using IIS 5.0 and CFMX on a new box running W2K.

Thanks in advance,
Matt

 

[DeZiner]

I'm currently doing the same on a Win2K server with CF 5.0. You can call the https by linking to it. All pages can wither be secured or unsecure based upon http or https. When I link to login I call it with

https://mydomain.com/login.cfm

then from there releative like /newpage.cfm. This keeps it in the protected domain. There is no issues with passing variables, URL or session etc between http and https DeZiner
Never be afraid to try something new.
Remember that amateurs built the Ark.
Professionals built the Titanic

 

[smack1]

Thanks! I'm trying to get away from having my whole site under SSL. I was planning to have a folder that had my login forms and action pages and just include them with <cfinclude> tags. I haven't been able to get it to work with the full HTTP or HTTPS address. Any suggestions?

Thanks again.