Security Considerations for IIS Applications

Securing Web sites is a critical issue for Web developers. It is also one of the most potentially confusing. A secure system requires careful planning, and Web site administrators and programmers must have a clear understanding of the options for securing their site. In addition, they need to understand how all of the various security subsystems interact.

This section provides an overview of the security issues faced by ASP, component, and ISAPI developers.

This section contains:

• Accessing Client Certificates with ASP: Describes the use of server-side scripts to access client certificates.
• Passing Security Context: Outlines the various security contexts that may play a part in request processing.
• Additional Security Considerations: Discusses the various issues surrounding security in IIS applications.