Application Security

[Suzan]

Hi All,

I want to Identify the machine which will connect to my Web App so that I log
it's transactions. I can not rely on the IP address since Some one can fake it.

What about the installing certificate in IE . Tools > Internet Options >
Content > Certificates .
Can the user Uninstall / install new certificate without the permission from
the network admin . Is there a shared certificate on the machine so it will not
depend on the profile of the user logged in.


Thanks

[Suzan]

I have searched this issue, a cgi.cert_subject holds the information of the
client certificate,

But in the coldfusion documentation it says it's for IIS4

[url]http://livedocs.macromedia.com/coldfusion/7/htmldocs/wwhelp/wwhimpl/common/html/[/url]
wwhelp.htm?context=ColdFusion_Documentation&file=0 0000193.htm

The microsoft documentation says it exists in IIS 5 and IIS6.

Any one tried it with IIS5 or IIS6 or Apache

Thanks

[Suzan]

I have searched this issue, a cgi.cert_subject holds the information of the
client certificate,

But in the coldfusion documentation it says it's for IIS4

[url]http://livedocs.macromedia.com/coldfusion/7/htmldocs/wwhelp/wwhimpl/common/html/[/url]
wwhelp.htm?context=ColdFusion_Documentation&file=0 0000193.htm

The microsoft documentation says it exists in IIS 5 and IIS6.

Any one tried it with IIS5 or IIS6 or Apache

Thanks