Friday, February 22, 2008

Web.Config

Configuration File Format

ASP.NET configuration files are XML-based text files--each named web.config--that can appear in any directory on an ASP.NET Web application server. Each web.config file applies configuration settings to the directory it is located in and to all virtual child directories beneath it. Settings in child directories can optionally override or modify settings specified in parent directories. The root configuration file--WinNT\Microsoft.NET\Framework\\config\machine.config--provides default configuration settings for the entire machine. ASP.NET configures IIS to prevent direct browser access to web.config files to ensure that their values cannot become public (attempts to access them will cause ASP.NET to return 403: Access Forbidden).

At run time ASP.NET uses these web.config configuration files to hierarchically compute a unique collection of settings for each incoming URL target request (these settings are calculated only once and then cached across subsequent requests; ASP.NET automatically watches for file changes and will invalidate the cache if any of the configuration files change).

For example, the configuration settings for the URL http://myserver/myapplication/mydir/page.aspx would be computed by applying web.config file settings in the following order:

Base configuration settings for machine.
C:\WinNT\Microsoft.NET\Framework\v.1.00\config\machine.config

Overridden by the configuration settings for the site (or the root application).
C:\inetpub\wwwroot\web.config

Overridden by application configuration settings.
D:\MyApplication\web.config

Overridden by subdirectory configuration settings.
D:\MyApplication\MyDir\web.config
If a web.config file is present at the root directory for a site, for example "Inetpub\wwwroot", its configuration settings will apply to every application in that site. Note that the presence of a web.config file within a given directory or application root is completely optional. If a web.config file is not present, all configuration settings for the directory are automatically inherited from the parent directory.

Tuesday, February 12, 2008

Tools and S/w website collection

Download videos DIRECT from most video sites Copy the link of the page with the video on it and paste it here

http://keepvid.com/ ( ex .. we can download the YouTube videos to our PC )

https://addons.mozilla.org/en-US/firefox/addon/4318
( for FireFox users )

Friday, February 1, 2008

Security Thread ( SSL and etc .... )

SSL certificate is the short form of secure socket layer certificate. This technology is used widely in the Internet transactions to make them secure. Normally, this technology is used to encrypt important information between the web servers and the client’s web browser by establishing an encrypted and secure link. This helps in making the information of the transaction private and secure. Millions of Internet transactions that happen everyday are using this technology to their advantage.

Netscape created SSL protocol. The protocol works in the following manner:

1. First, web browser requests a secure page from the client side.

2. If the website has SSL certificate, certificate will be sent along with its public key by the web server.

3. After receiving the certificate, client side’s web browser checks for the validity of the certificate. Its checks whether certificate belongs to the site. If so is it still valid and has it been issued by a trusted party (This will be normally tested through a Certificate Authority (CA)). If it fails on any one of these checks the browser will display a warning to the end user letting them know that the site is not secured by SSL.

4. Then the web browser uses its public key to encrypt the data. It then sends it to the web server with the encrypted URL required along with other encrypted http data.

5. Decryption of the symmetric encrypted key will takes place at the web server. To decrypt, web server uses its private key. To decrypt the URL and http data, it uses the symmetric key.

6. Along with the symmetric key the web server sends back the requested html document and http data in the encrypted form.

7. Using the symmetric key, the web browser at the client side decrypts the http data and html document. Then web browser displays the information.

In this way, Secure Socket Layer protocol helps in making very secure Internet transactions.

Normally a SSL certificate contains your company name, your domain name, and your address with country, state, and city. It will also tell the web browser about the details of your CA and your SSL certificate expiration date.

You can get more information about SSL certificates and various products from www.ssl.com. Its top management, which includes its President Leo Grove and its Vice President Jade Chaney, are working really hard with its partners to provide the best possible products to all types of enterprises. Feel free to browse through the site and it’s blogs to learn all the new advancements in the SSL protocol and Certificate.