Hi,

I am securing a CMS server and I'd like to know your thoughts about
using SSL when authenticating remote CMS users.

I know that an encrypted token is issued by CMS when a user is
authenticated but it is enough to protect the credentials ?

Thanks,

Mario Bouchard

[ Post a follow-up to this message ]

Hi Mario,

the token does not contain the credentials.
So if you are SSL protecting the login dialog (means the post that sends
username and password) the credentials are protected.

Cheers,
Stefan.

--
This posting is provided "AS IS" with no warranties, and confers no rights.

MCMS FAQ:
http://download.microsoft.com/downl...>
MCMS+2002+-+(complete)+FAQ.htm
MCMS Blog: http://blogs.msdn.com/stefan_gossner/category/4983.aspx
MCMS Sample Code:
http://www.gotdotnet.com/community/...nagement+Server
MCMS Whitepapers and other docs:
http://blogs.msdn.com/stefan_gossne...2/07/41859.aspx
--------------------------------


"Mario Bouchard" <mbouchard@esitechnologies.com> wrote in message
news:a768566b.0410061254.6df4c708@posting.google.com...
> Hi,
>
> I am securing a CMS server and I'd like to know your thoughts about
> using SSL when authenticating remote CMS users.
>
> I know that an encrypted token is issued by CMS when a user is
> authenticated but it is enough to protect the credentials ?
>
> Thanks,
>
> Mario Bouchard

[ Post a follow-up to this message ]