Monday, February 11, 2008

Use Secure Sockets Layer

You can use password protection to restrict access to certain folders and data in your web. However, if the password and data are passed in clear text across a network, a third party could potentially run a network data capture (sniffer) program to capture the password or data. To ensure that no unauthorized person can intercept and interpret confidential information, use the Secure Sockets Layer (SSL) protocol for the following:
Remote administration
Authoring
Browse access to any sensitive portions of the Web site
SSL is a protocol that provides communications privacy, authentication, and message integrity for a TCP/IP connection. SSL transmits passwords in an encrypted form that is unreadable by normal means. By using this protocol, a browser can communicate with the Web server in a way that prevents eavesdropping, tampering, or message forgery.
To use the SSL protocol for connections to a new web
In FrontPage, on the File menu, point to New, and then click Web.
In the New dialog box, click Secure connection required (SSL).
If you administer the Web server where the FrontPage-based web is published, and if your Web server is Internet Information Server running on a Windows NT server, you can use the Microsoft Management Console to require SSL authoring for an existing web.
To set the SSL protocol requirement for an existing web
In the Microsoft Management Console, right-click the web, and then click Properties on the shortcut menu.
On the Server Extensions tab, select the Require SSL for authoring option.

No comments: