SSL Question

[joshdm]

I've been looking for some time for info on SSL.
I've found some tutorials and other materials, and great, they explain a lot, but nothing explains the one thing that has been bugging me.

I install a certificate on my server.
I have some pages that I would like "secure" (meaning I visit the page, it's got a POST to submit to a servlet, etc...).

I access these pages "securely" using: https://www.servername.com/page.html

My question?

What's to stop me (or anyone for that matter) from using
http://www.servername.com/page.html
to access page.html ?

Am I missing something here?

Thanks.

-Josh
[This message has been edited by joshdm (edited 08-10-00@5:53 pm)]

[Justin]

This depends on your server setup. Some servers do in fact allow the access either way. The best way in that case is to test the environment variables within your script to make sure they are using the HTTPS protocol (I don't remember off hand what the variable(s) is/are, but there are some SSL-specific variables you can test for).

On the FutureQuest servers, your SSL directory is not the same as your non-SSL directory - so you could not simply strip the 's' from the protocol specifier and access the files directly. The scenerio you posted is the exact reason it is set up in this way.

------------------
Justin Nelson
FutureQuest (http://www.FutureQuest.net/index.php) Support

[joshdm]

Ah ha![nbsp][nbsp]A different directory.[nbsp][nbsp]That would do it and that explains it.[nbsp][nbsp]I hope it works the same way for my server.[nbsp][nbsp]I've got to go figure out where to set the directory for SSL to search now.[nbsp][nbsp]Thanks.[nbsp][nbsp]

If anyone else has any comments, please feel free to type them in - any help is still helpful.