Groups | Blog | Home
all groups > iis security > april 2008 >

iis security : Is HTTPS Url Exposed?


Izorich
4/24/2008 12:27:00 PM
HTTPS protocol transfers data using encryption. Is request URL encrypted or
is it available in plain text when packets are transmitted? I'd like to use
query part of URL to pass request id and I wonder if that request ID is
encrypted or not.

for example:

https://host/page.aspx?myId=myIdValue

Ken Schaefer
4/24/2008 4:56:18 PM
Hi,

The requested URL is encrypted.

Cheers
Ken

--
My IIS blog: http://adopenstatic.com/blog

[quoted text, click to view]
wjzhang@online.microsoft.com (
4/25/2008 6:58:17 AM
Hi,

The whole http package is encrypted. That's the reason why generally host
headers cannot work with SSL site because IIS cannot retrieve the url and
hostname info before decryption.

Please update here if you have any further question.

Have a great day.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
wjzhang@online.microsoft.com (
4/29/2008 10:58:05 AM
Hi,

Just want to check if you have any further question on this?

Thanks.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
AddThis Social Bookmark Button