105 pts.
 iSeries on the Web – some pages HTTP, some HTTPS?
Warning: newbie to web programming and all the security implications... We are developing a small shopping website to be hosted on our iSeries. We will be purchasing an SSL certificate. Only some of our pages need to be encrypted (https). Most of the pages do not contain sensitive info, so do not need to be encrypted (http is ok). How is this accomplished (i.e. some pages have http, others have https)? TIA

Software/Hardware used:
ASKED: May 21, 2009  2:34 AM
UPDATED: May 27, 2009  11:14 PM

Answer Wiki:
You can make one site non SSL and another site with SSL for example, http://www.web.com and https://secure.web.com. This is a <a href="http://www.codeproject.com/KB/web-security/WebPageSecurity_v2.aspx">good article </a>on how to set this up using a web.config file.
Last Wiki Answer Submitted:  May 22, 2009  11:16 pm  by  mshen   27,310 pts.
All Answer Wiki Contributors:  mshen   27,310 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

Thanks for the answer, Mshen. I was not even aware that the secure page had to be on another site from the non-secure page. I was thinking that perhaps there was something embedded within the page which “switched it” from non-secure to secure.

I gather that when I go to purchase my SSL certificate, I will need to register a domain other than the “main” domain.

 105 pts.

 

Thats correct. The SSL certificate needs to have the same domain name that the users will use to access it.

 27,310 pts.