SSL for User Controls

Question

I have a .net site which dynamically loads user controls and content based on querystring values, and it works quite nicely. I need to invoke SSL for the shopping cart features and I would like to know whether it is possible (and if so, how ) to switch SSL on as needed, depending on which user control is called. Thanks Tony

accarcieri · Answer

Thanks a whole bundle - you have helped me heaps. Tech help in plain language is a godsend. Cheers Tony

jshepler · Answer

As I understand it, yes, you buy a SSL certificate and install it for the whole site. I've never done it, so I don't know what all is involved in getting and installing a certificate. You're users will probably get notified that they are being redirected to a secure site. The only problem with that is ignorant users clicking NO. Also, if your page has frames, the users will also get notified that the page is showing both secure and non-secure items and if they want to show the non-secure items. Again, ignorant users will probably click NO and your page will look weird - only the sercure parts will get rendered. If you are using frames, I think it would be best to load the whole frameset via HTTPS. Nothing worse than users not trusting your site because they're being told something about non-secure items.

accarcieri · Answer

So, to clarify, I would need to have SSL installed for the whole site, and just invoke it as needed with the above method. That is so simple. Do you foresee any problems with this method, J? Thanks Tony

jshepler · Answer

Since SSL is handled by IIS, not .NET, you would need to redirect the user to the same page via HTTPS so IIS detects SSL being needed and act accordingly. Response.Redirect("HTTPS://foobar.com/somepage", true); The true tells .NET to end the reponse there instead of continuing.