SSL

Answered Question
Mar 31st, 2010
User Badges:

Hello Netpro

I need to publish a website on a DMZ Server with Active Directory authentication. Its not a public website.

I need to understand the advantages/disadvantages of publishing with SSL and without SSL


thanks

Nasr

Correct Answer by Aaron Harrison about 7 years 2 months ago

Hi


Well - what's important is how the AD credentials are sent from client to server.


SSL will ensure that the credentials are encrypted even if the credentials are set to 'plain text' in IIS...


It will also validate that the server users are connecting to is the server it says it is - really anywhere where you want users to put their AD credentials (which if compromised could get someone access to any number of things) should be verified in this way...


Aaron


Please rate helpful posts..

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Aaron Harrison Wed, 03/31/2010 - 04:06
User Badges:
  • Super Bronze, 10000 points or more
  • Community Spotlight Award,

    Member's Choice, May 2015

Hi


Well - what's important is how the AD credentials are sent from client to server.


SSL will ensure that the credentials are encrypted even if the credentials are set to 'plain text' in IIS...


It will also validate that the server users are connecting to is the server it says it is - really anywhere where you want users to put their AD credentials (which if compromised could get someone access to any number of things) should be verified in this way...


Aaron


Please rate helpful posts..

Actions

This Discussion