Featured post

c# - Usage of Server Side Controls in MVC Frame work -

i using asp.net 4.0 , mvc 2.0 web application. project requiremrnt have use server side control in application not possibl in noraml case. ideally want use adrotator control , datalist control. i saw few samples , references in codepleax mvc controllib howwver found less useful. can tell how utilize theese controls in asp.net application along mvc. note: please provide functionalities related adrotator , datalist controls not equivalent functionalities thanks in advace. mvc pages not use normal .net solution makes use of normal .net components impossible. a normal .net page use event driven solution call different methods service side mvc use actions , view completly different way handle things. also, mvc not use viewstate normal .net controlls require. found article discussing mixing of normal .net , mvc.

https - To use or not to use SSL? Why use SSL always? -


the argument using ssl prevent malicious user has gone through pains of snooping traffic being able read traffic. while may make sense if using unsecured wireless (non wpa2) network use ssl when logging on bank account or giving credit card number, find difficult see it's neccessaity in more common business cases.

why bother ssl? (when client not going on unsecured wireless network)

the way can snoop particular http connections , data therein if have admin access router (and if there facility monitor/copy traffic), installed tool on machine (a key logger of course pass ssl anyway) or monitor @ isp (for warrant required in jurisdictions).

update warning jurisdictions not free may think, particularly 1st , 2nd world, e.g. in uk, government may not require warrant: http://en.wikipedia.org/wiki/communications_data_bill_2008 entail ability read websites historically (i.e. decrypt ssl) , us's "patriot act" http://en.wikipedia.org/wiki/us_patriot_act#title_ii:_surveillance_procedures

furthermore:

  • accepting ssl connections server side adds significant load establishing of connection processor intensive (during generation of secret keys).
  • publicly trusted ssl certificates have purchased 3rd party periodically

update: using ssl, though thought worthwhile ask question anyway. think there time ssl not necessary. maybe turned community wiki of pros , cons of ssl? if how?

there seems commonly occurring myth in answers below: "anyone between , server can eavesdrop on you"...

  • this not not possible on internet low level tcp routers forward packets have go , in same session can routed through different routes, , no 1 can @ these packets except in extreme cases - technically or lawfully.
  • @ isp looking @ traffic wonder why signal out , @ 'so important data' no doubt boring them, illegal without warrant.
  • on lan (except wireless) unless using dinosaur hub broadcasts every packet there no way listen on else's traffic - not possible because hardware not send packets if have network card in promiscuous mode , using sniffing tool such snort or wireshark.

passive arp poisoning 1 way listen in has done internally , should picked name conflicts etc. start occuring , default gateway static v. difficult cause default gateway on before you.

ssl should used anywhere communicating information should not public. dangerous assumption believe no-one listening traffic between computer , remote server.

all needs snoop traffic on network - don't need admin access router. without using ssl sensitive communications, single machine virus on coworkers computer needed stealing identity.

the isp has access network traffic - how trust techies?

dear user,

we've decided against encrypting our internet traffic because don't think it's important. decided it's hard monitor internet traffic, if prepared go effort, deserve data can hands on. if you're using old style of router, have corrupt staff and/or co-workers, or doesn't , decides steal data, accept no liability.

we advise against telling our decision, direct unwanted attention our ip traffic.

kindest regards,

good enough programming

disclaimer: if hacker , stumbled across message while monitoring ip traffic, politely point out doing illegal, , request pretend never saw it.


Comments

Popular posts from this blog

c# - Usage of Server Side Controls in MVC Frame work -

cocoa - Nesting arrays into NSDictionary object (Objective-C) -

ios - Very simple iPhone App crashes on UILabel settext -