Question

如果我把用户的录音带转贴在我的网站上的非SSL网页上:

Response.Redirect("http://www.mysite.com/page.aspx");

但主页有:

if (IsLoggedIn)
    ForceSSL();

将用户转向:

Response.Redirect("https://www.mysite.com/page.aspx");

从转头到第二向,是否有从客户向服务器传送的无担保数据?

Answer 1

http://www.mysite.com 发送任何与这个领域相关的联ok,但是如果你在

(假定你的厨师只能保证安全)

Edit:

如果网站使用标准认证表格,那么,你想要在网上做像样的事情,那就错了。召集会议,并照顾你们(需要特别服务):

<authentication mode="Forms">
  <forms loginUrl="Login.aspx" timeout="15" slidingExpiration="true" requireSSL="true"/>
</authentication>

Edit #:

如果你能够把这一系统强加于所有厨师(无认证形式),我是奇怪的。

<httpCookies domain="String" requireSSL="true" />

Answer 2

It depends:) If presume the code in masterpage is in Page_load so no:) You are handlign everything on the server side. No data is sent to the client until the request is completed. And Response.Redirect terminates response in a particularly nasty way (threadAbort) and initiates a new one. But as John has mentioned cookies might be sent

友情链接