HOWTO: Send Secure Data To Client Using SSL

[Dan Sikorsky]

I've sent private data back to the IIS by implementing the web page
reference to HTTPS, but how can secure data be sent to the client computer
over the internet using SSL?

 

[Ray at]

What do you mean? It's secure in both directions. If the user goes to
https://yoursite.com/page.asp, that page will be transmitted securely.

Ray at work

 

[Dan Sikorsky]

Are you sure? The page is sent to the browser with <input> tags on it. If a
user types in sensitive data on a form field, I agree that the data is
securely sent back to the server.

But, the direction of the secured data is from browser to server; the <input
type=text> field is passed thru SSL on the browser side and decoded on the
server side.

I'm not sure that the prepared page on the server is passed thru SSL on the
server, prior to being sent to the browser. Do you know for sure? Example:
Can a file be downloaded from a server to a browser?

 

[Ray at]

No, it's in both directions. I promise. :]

Here's a link that discusses SSL.
http://www.itsecurity.com/asktecs/aug3301.htm

Ray at home