Timeline for Ensuring secure downloads for IIS
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 3, 2013 at 0:01 | comment | added | dan♦ | No problem - good luck :-) | |
| Sep 3, 2013 at 0:00 | vote | accept | Wade73 | ||
| Sep 2, 2013 at 20:10 | comment | added | dan♦ | There's not much to be concerned with while the file is in transit over SSL - after all, this is the same cryptography that banks use. The areas to be concerned with are who can access the files on the server (i.e., user authentication, and server security as covered above). Once the file is downloaded, other than confirming the file hasn't been altered (as covered above), there's not much else you can do except encrypt the file on the server and provide a decryption key/tool for clients. | |
| Sep 2, 2013 at 19:28 | comment | added | Wade73 | The client is putting the files on the site, so I am not concerned about that. What I am afraid of is that there might be some way to intercept or capture the file information as it is being downloaded. I have heard of man-in-the middle attacks, but is there some other potential way a hacker could get the downloaded file? | |
| Aug 31, 2013 at 8:34 | history | answered | dan♦ | CC BY-SA 3.0 |