Solved

SSL for Single Page in ASP.net website

Posted on 2008-10-06
5
1,293 Views
Last Modified: 2012-05-05
I have a asp.net website and i want to install SSL(https://) on it but only for one page (i.e)Login.aspx.
Can any one tell me how do i do that?Actually i can get it done for the whole web site but i read that it drastically degrades the website performance.Can any one tell me how that is done?or any url where it step by step specifies to accomplish this.
Thanks,
0
Comment
Question by:aspnetdev
5 Comments
 
LVL 14

Expert Comment

by:CyrexCore2k
ID: 22652225
So are you asking how to install SSL or how to get Login.aspx to be the only page that uses it?

Personally I recommend creating an entirely different site to manage any secure transactions. Logging in, user profiles, credit cards, whatever and then redirecting back to the respective site that called it. If you set up your authentication site to work like a passport site it will benefit you in the future in that you'll be able to have multiple sites use the same location to log in.
0
 
LVL 36

Expert Comment

by:Loganathan Natarajan
ID: 22652378
0
 
LVL 31

Accepted Solution

by:
Paranormastic earned 250 total points
ID: 22652389
Generically, you set up the cert for the entire site - this in itself does not degrade performance.  If you force usage of it then that's a different story...  The slow down is directly related to the encrypting process itself when the page gets loaded and it needs to be encrypted, not because it happens to be avaialble.

For your logon page you will want to force usage, and check the sub-box for forcing 128 bit.  You can do that in the properties of that page after the cert is installed.

I agree with the previous posting - if you set up a new site for secured transactions (e.g. http://www.domain.com links to https://secure.domain.com) then you can enable SSL for the entire site, reducing mistakes in the long run, which leaving your primary site alone so you don't have to mess with it.
0
 

Author Comment

by:aspnetdev
ID: 22652601
Hi,
Thanks for the quick replies,CyrexCore2k you are right i want to get Login.aspx to be the only page that uses it?Also,creating a new site is not a feasible solution for me...actually my website has Forms Based authentications and currently the site is http:// and passwords are travelling unencrypted.So i wanted just the Login.aspx page to use the https://.Please let me know your thoughts.
Thanks,
0
 
LVL 31

Expert Comment

by:Paranormastic
ID: 22652941
you can go into the properties of just that page and directory security tab and enable it there.  also, just having the cert installed allows SSL to be used, but go into the properties to force it for that page, and for 128 bit as well.

just having it installed for the whole site doesn't mean its going to be used for the whole site as long as you only force it for that one page.
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction This article shows how to use the open source plupload control to upload multiple images. The images are resized on the client side before uploading and the upload is done in chunks. Background I had to provide a way for user…
International Data Corporation (IDC) prognosticates that before the current the year gets over disbursing on IT framework products to be sent in cloud environs will be $37.1B.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question