Welcome to MSDN Blogs Sign in | Join | Help

Browse by Tags

All Tags » https   (RSS)
Friday, October 02, 2009 10:55 PM

Internet Explorer Cannot Download https://something

Earlier today, I was asked to troubleshoot a secure site where file downloads were always failing. Having seen this problem many times often over the years, I immediately suspected that the web developer wasn’t aware that if a user tries to download *
Posted by EricLaw | 14 Comments
Thursday, September 03, 2009 12:36 AM

Client Certificate Selection Prompt

The HTTPS protocol allows a secure server to request that the client verify their identity with a client certificate during the initial secure handshake. By presenting a client certificate, the browser helps further defeat man-in-the-middle attacks and
Posted by EricLaw | 8 Comments
Filed under: , ,
Thursday, August 20, 2009 7:53 PM

Getting the Server's Certificate Chain from WinINET

Over the last few years, a number of folks have lamented that there's no good way to get the server's complete certificate chain from a WinINET HTTP response. That has changed with the release of the new WinINET shipping in Windows 7 / IE8. INTERNET_OPTION_SERVER_CERT_CHAIN_CONTEXT
Posted by EricLaw | 0 Comments
Filed under: , , , ,
Monday, June 22, 2009 5:42 PM

Handling Mixed (HTTPS/HTTPS) Content

Background As we developed Internet Explorer 8, we spent quite a bit of time pondering what to do about IE7’s infamous “Mixed Content” warning prompt: As I noted on the IEBlog four years ago, the mixed content warning occurs when a web developer references
Posted by EricLaw | 24 Comments
Filed under: ,
Friday, June 19, 2009 5:55 PM

Windows 7 adds support for TLSv1.1 and TLSv1.2

Windows 7's updated crypto stack (schannel.dll, etc) offers support for TLSv1.1 and TLSv1.2. While disabled by default in IE8 (for compatibility reasons; some legacy sites will fail to connect when the updated TLS version is offered) the new protocol
Posted by EricLaw | 2 Comments
Filed under: ,
 
Page view tracker