all groups > asp.net security > september 2004 > threads for september 29 - 30, 2004
Filter by week: 1 2 3 4 5
403 Error Web App to Web App with Client Certificates
Posted by Peter Sedman at 9/30/2004 5:03:42 PM
Hi,
I'm trying to write a ASP.NET application that calls another ASP.NET
application using the HttpWebRequest class.
I need to secure the communicate with Client Certificates. I'm adding a
certificate to the request but get a 403 error when running.
I've read that this was a problem wit... more >>
Resetting passwords
Posted by tjgraham4 NO[at]SPAM hotmail.com at 9/30/2004 10:57:12 AM
I need to know how to reset a password when the user enters their
email address in a textbox then their new password in a textbox and
then a confirm password textbox. This will be updated when the Reset
Password button is clicked to the database where their old password is
attached to the email... more >>
session authentication for users
Posted by tjgraham4 NO[at]SPAM hotmail.com at 9/30/2004 10:46:59 AM
Hi,
I need to know the best way to program a login page that will only
authenticate users when they click the login button at the top of our
page. Once they are authenticated they will be able to go through the
process of ordering, etc. I am not very well versed at ASP.NET but I
don't think... more >>
Massive ASP.Net Forms Authentication vulnerability
Posted by Greg Hurlman at 9/30/2004 6:17:02 AM
http://sourceforge.net/mailarchive/forum.php?thread_id=5671607&forum_id=24754
This is, IMNSHO, the worst thing I've ever heard of.
Spread the word, test your sites, and send angry emails to Microsoft.
---
Greg Hurlman
ghurlman*AT*squaretwo*DOT*net
http://blogs.squaretwo.net... more >>
Newbie - Mixed Mode Security
Posted by Des Norton at 9/29/2004 1:40:32 PM
Hi NG
I am busy planning a new project for a client. This is my first ASP.NET app.
This will be an Intranet, therefore I am considering Windows Authentication.
However:
1. They have a number of user that dial into their network, and log on to
the domain.
Am I correct in assuming that they... more >>
form authentication parser error.
Posted by raizen at 9/29/2004 8:47:04 AM
I have a sub-directory named admin and when a user tries to access the page
inside "admin" folder I would like to use form authentication to validate the
user. It says on many forums that I need the "admin" folder to be virtual
directory which is set as an application so I did. The login pag... more >>
Forms Authentication with http/https
Posted by Holysmoke at 9/29/2004 7:27:03 AM
Hi,
I am trying to implement Single Sign On solution to my web applications.
I have developed a web application which does authenticaion and it is SSL
based.
I am having a problem when redirecting to the requested web site(http based)
after authentication (https based)
Let us say I hav... more >>
|