Re: SSL and scripts.

[Stephanie Wright <swright@xxxxxxxxx>]

> > > Dear All,
> > >
> > > Quick SSL question:
> > >
> > > Q. If I have a secure domain are the 'outputs' of the domains cgi 
> > > scripts also encrypted?
> > >
> > > (I have not had time yet to test this, so I thought I'd ask first:-)
> >
> > That kinda depends on what the script is doing...
> >
> > For example, if it is generating some text and sending it back to 
> > the browser, then yes, it's still over the https connection.
> >
> > If it is taking form data and sending an email off somewhere else 
> > via SMTP, then no, probably not unless encryption is a specific 
> > part of what the script itself does.
> Ok, I can refine the question a little more now:-)
>
> If the script questions a flat file database and returns the output 
> then this would be encrypted as this would still be under the https 
> connection?
>
> I guess that I would have to mod the cgi in order force it to use 
> https or would this happen 'by itself'?..(probably a dumb question!)

Nope - no dumb questions.

You don't have to do anything to the script, that would still be over 
the https connection, because the browser and server stay connected 
while the script is collecting and formatting the data and then 
returning it to the browser.

If your script sent someone off to a different web page, you'd want 
to make sure the link was https if you wanted it to still be secure.
--
    Stephanie J. Wright

---------------------------------------------------------------------
Tenon Intersystems                                       805-963-6983
1123 Chapala Street                                 swright@xxxxxxxxx
Santa Barbara, CA 93101                          http://www.tenon.com
---------------------------------------------------------------------

----
Tenon Intersystems' WebTen Mailing List
To unsubscribe: send mail to webten-request@xxxxxxxxx with the 
subject: unsubscribe
Find searchable Mailing List archives at
http://listsearch.blueworld.com/webtensearch.lasso