Solved

SSL for Single Page in ASP.net website

Posted on 2008-10-06
5
1,296 Views
Last Modified: 2012-05-05
I have a asp.net website and i want to install SSL(https://) on it but only for one page (i.e)Login.aspx.
Can any one tell me how do i do that?Actually i can get it done for the whole web site but i read that it drastically degrades the website performance.Can any one tell me how that is done?or any url where it step by step specifies to accomplish this.
Thanks,
0
Comment
Question by:aspnetdev
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 14

Expert Comment

by:CyrexCore2k
ID: 22652225
So are you asking how to install SSL or how to get Login.aspx to be the only page that uses it?

Personally I recommend creating an entirely different site to manage any secure transactions. Logging in, user profiles, credit cards, whatever and then redirecting back to the respective site that called it. If you set up your authentication site to work like a passport site it will benefit you in the future in that you'll be able to have multiple sites use the same location to log in.
0
 
LVL 36

Expert Comment

by:Loganathan Natarajan
ID: 22652378
0
 
LVL 31

Accepted Solution

by:
Paranormastic earned 250 total points
ID: 22652389
Generically, you set up the cert for the entire site - this in itself does not degrade performance.  If you force usage of it then that's a different story...  The slow down is directly related to the encrypting process itself when the page gets loaded and it needs to be encrypted, not because it happens to be avaialble.

For your logon page you will want to force usage, and check the sub-box for forcing 128 bit.  You can do that in the properties of that page after the cert is installed.

I agree with the previous posting - if you set up a new site for secured transactions (e.g. http://www.domain.com links to https://secure.domain.com) then you can enable SSL for the entire site, reducing mistakes in the long run, which leaving your primary site alone so you don't have to mess with it.
0
 

Author Comment

by:aspnetdev
ID: 22652601
Hi,
Thanks for the quick replies,CyrexCore2k you are right i want to get Login.aspx to be the only page that uses it?Also,creating a new site is not a feasible solution for me...actually my website has Forms Based authentications and currently the site is http:// and passwords are travelling unencrypted.So i wanted just the Login.aspx page to use the https://.Please let me know your thoughts.
Thanks,
0
 
LVL 31

Expert Comment

by:Paranormastic
ID: 22652941
you can go into the properties of just that page and directory security tab and enable it there.  also, just having the cert installed allows SSL to be used, but go into the properties to force it for that page, and for 128 bit as well.

just having it installed for the whole site doesn't mean its going to be used for the whole site as long as you only force it for that one page.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes in DotNetNuke module development you want to swap controls within the same module definition.  In doing this DNN (somewhat annoyingly) swaps the Skin and Container definitions to the default admin selections.  To get around this you need t…
The article shows the basic steps of integrating an HTML theme template into an ASP.NET MVC project
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question