Deny non-ssl access for login web pages

Deny non-ssl access for login web pages
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Deny non-ssl access for login web pages Warren 05-28-2006
Posted by Warren on May 28, 2006, 11:12 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

I'd like to know how I can deny non-ssl(non-https) access to my login
page, but after user logging in, normal http should be used.

Should it be set at my web page or at the my web server (OC4J
container) level?
Now I have both http and https on the web server enabled, but the
tester can access the non-secured login page by manually typing in
"http://....".

Any hints? Thanks.


Posted by Barry Margolin on May 29, 2006, 12:48 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> Hi,
>
> I'd like to know how I can deny non-ssl(non-https) access to my login
> page, but after user logging in, normal http should be used.
>
> Should it be set at my web page or at the my web server (OC4J
> container) level?
> Now I have both http and https on the web server enabled, but the
> tester can access the non-secured login page by manually typing in
> "http://....".
>
> Any hints? Thanks.

I suggest you ask in the appropriate comp.infosystems.www.authoring.*
newsgroups.

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***

Similar ThreadsPosted
Deny network access if virus defs not up-to-date April 20, 2005, 12:04 am
Advice, security specification calls for using system login to do login to web application August 28, 2007, 8:19 am
pre-encrypted web pages August 2, 2007, 3:51 am
unable to navigate to other internet pages November 5, 2004, 3:56 am
Service That Runs Secure Contact Us Pages for Companies? June 14, 2008, 7:21 pm
does Windows XP have a hosts.deny? March 12, 2005, 5:56 am
Using sudo to deny chown/chmod recursively July 8, 2005, 8:15 am
Auto Proxy Login?? Please help March 14, 2005, 4:39 am
how to log or block login attempts on OS X? August 18, 2006, 5:04 pm
Bank login not using https March 9, 2007, 11:46 pm

The site map in XML format XML site map

Contact Us | Privacy Policy