Solved

Flash SSL

Posted on 2008-10-23
2
952 Views
Last Modified: 2013-11-11
To enable secure swf-to-server communication with secure server-to-swf replies, you may want to use the sendAndLoad method of the LoadVars class to send an SSL encrypted request to a server.

My tests have shown that if you use the sendAndLoad method (implying that you expect a reply from the server) and want to send to an https address e.g.

my_loadvars_out.sendAndLoad('https://www.site.com/page.php', my_loadvars_in);

that the swf that's making this request must ITSELF have been served via https.

I'm trying to get confirmation that this is correct.

Attempting to use sendAndLoad to an https address from an swf that itself is served via http seems to cause an immediate IO error when the attempt is made


<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,28,0" width="300" height="250">

<param name="movie" value="https://www.site.com/test.swf" />

<param name="quality" value="high" />

<embed src="https://www.site.com/test.swf" width="300" height="250" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash">

</embed>

</object>

Open in new window

0
Comment
Question by:rmirabelle
2 Comments
 
LVL 34

Accepted Solution

by:
Aneesh Chopra earned 500 total points
ID: 22787419
Yes, it is mandatory

SWF which is requesting must also be on https server while calling sendAndLoad method to a https url


secondly,
SWF and calling URL must be on same server, otherwise you must also have to implement the crossdomain.xml
0
 
LVL 37

Expert Comment

by:CyanBlue
ID: 22787430
You have a couple of HTTP in that code snippet like codebase or pluginspage...  Make sure they are all HTTPS and valid URLs...

CyanBlue
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

I know the transition can be hard. We got used to the ease of use ActionScript 2 had, but honestly, it became problematic later on, especially if designers were involved in the project and found it easy to add code as they saw fit. So, this artic…
Here are some practices and techniques that can be adopted into your Flash/Flex application development process. Note: Not all "performance tips" provide an immediately-recognizable benefit.   This article does not include timing validation data,…
The goal of the tutorial is to teach the user how to live broadcast using Flash Media Live Encoder and connecting it to YouTube to broadcast. Log into your Youtube account, choose live stream settings, start live stream from Flash Media Live Enc…
The goal of the tutorial is to teach the user how to how to record live broadcast.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now