|
Home > Archive > Microsoft Content Management Server > October 2004 > Using SSL when authenticating users ?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Using SSL when authenticating users ?
|
|
| Mario Bouchard 2004-10-06, 5:51 pm |
| Hi,
I am securing a CMS server and I'd like to know your thoughts about
using SSL when authenticating remote CMS users.
I know that an encrypted token is issued by CMS when a user is
authenticated but it is enough to protect the credentials ?
Thanks,
Mario Bouchard
| |
| Stefan [MSFT] 2004-10-07, 2:55 am |
| Hi Mario,
the token does not contain the credentials.
So if you are SSL protecting the login dialog (means the post that sends
username and password) the credentials are protected.
Cheers,
Stefan.
--
This posting is provided "AS IS" with no warranties, and confers no rights.
MCMS FAQ:
http://download.microsoft.com/downl...6a/MCMS+2002+-+(complete)+FAQ.htm
MCMS Blog: http://blogs.msdn.com/stefan_gossner/category/4983.aspx
MCMS Sample Code:
http://www.gotdotnet.com/community/...t+S
erver
MCMS Whitepapers and other docs:
http://blogs.msdn.com/stefan_gossne...2/07/41859.aspx
--------------------------------
"Mario Bouchard" <mbouchard@esitechnologies.com> wrote in message
news:a768566b.0410061254.6df4c708@posting.google.com...
> Hi,
>
> I am securing a CMS server and I'd like to know your thoughts about
> using SSL when authenticating remote CMS users.
>
> I know that an encrypted token is issued by CMS when a user is
> authenticated but it is enough to protect the credentials ?
>
> Thanks,
>
> Mario Bouchard
|
|
|
|
|