Posted on: 5/20/2011 6:47:31 AM | Views : 230

Hi All
I have a web site up and running that requires a username and password to login.
This web site is created using ASP.net in VS2008 and connects to several databases to perform the usual tasks.
These databases hold company information.
In my web.config I set the Authentication to Forms:-
 
<authentication mode="Forms"> <forms loginUrl="Login.aspx" protection="All" timeout="20" name=".LOGIN" path="/" requireSSL="false" slidingExpiration="true" defaultUrl="Login.aspx" cookieless="UseDeviceProfile" enableCrossAppRedirects="false"/> </authentication> The web site is currently a http site but based on the above should I get a SSL Certificate and make it a https?
tia
Yuppski
 
 
 
...

Go to the complete details ...