Couple of techno questions

This WebDNA talk-list message is from

1999


It keeps the original formatting.
numero = 23932
interpreted = N
texte = Hello all, I've got two questions that have come up recently that I would like the list's help with. First, I'm having a debate with a client that the page that a cc number is entered (invoice.tpl) doesn't necessarily need to be served via ssl, so long as the page it submits to is served via ssl. My contention is that since http is 'sessionless' in the sense that once you've downloaded the page you are no longer connected to the server, then typing your cc number into a page that is not encrypted poses no security risk. It's the request for the next page (thankyou.tpl) that is the issue. Once you hit the submit button, the client attempts to connect to the https server. The data is then sent to the https server through an encrypted connection. Therefore, it is not essential that invoice.tpl is encrypted, as long as thankyou.tpl is. Am I correct or am I misunderstanding how http sessions operate? Second, I'm having trouble with a client who's entire LAN is using NAT to connect to the internet through one IP address. They are seeing each other's orders from different machines Is there an easy way to fix this? With the SOHO and NAT becoming more prevalent these days, do we need to start depending on cookies to track users?Thanks, Mike Davis Associated Messages, from the most recent to the oldest:

    
  1. Re: Couple of techno questions (Kenneth Grome 1999)
  2. Couple of techno questions (Mike_Davis 1999)
  3. Couple of techno questions (Mike_Davis 1999)
  4. Couple of techno questions (Mike_Davis 1999)
Hello all, I've got two questions that have come up recently that I would like the list's help with. First, I'm having a debate with a client that the page that a cc number is entered (invoice.tpl) doesn't necessarily need to be served via ssl, so long as the page it submits to is served via ssl. My contention is that since http is 'sessionless' in the sense that once you've downloaded the page you are no longer connected to the server, then typing your cc number into a page that is not encrypted poses no security risk. It's the request for the next page (thankyou.tpl) that is the issue. Once you hit the submit button, the client attempts to connect to the https server. The data is then sent to the https server through an encrypted connection. Therefore, it is not essential that invoice.tpl is encrypted, as long as thankyou.tpl is. Am I correct or am I misunderstanding how http sessions operate? Second, I'm having trouble with a client who's entire LAN is using NAT to connect to the internet through one IP address. They are seeing each other's orders from different machines Is there an easy way to fix this? With the SOHO and NAT becoming more prevalent these days, do we need to start depending on cookies to track users?Thanks, Mike Davis Mike_Davis

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

Web Merchant process after credit card clears (1998) Re2: frames & carts (1997) Max Record length (1997) Purging the .hdr file from cache ... ? (2003) Chomp? (2004) problems with 2 tags shakur (1997) Bug Report, maybe (1997) RE: Re:Signal Raised (1997) Re:Running 2 two WebCatalog.acgi's (1996) Help! (2000) WebCat.acgi from /cgi-bin/? (1997) Calculating multiple shipping... (1997) Here we go again... (2006) [WebDNA] "Technical Reference" link broken in admin (2013) SiteGaurd file Cache vs webcatalog cache (1997) Problems getting parameters passed into email. (1997) Capitalize (2000) Alternative colors? (2000) [authenticate] (1999) Running 2 two WebCatalog.acgi's (1996)