Forum posts for ielowutil.exe

IE Protected Mode + SSL Login = No cookie for non-SSL pages

(FWIW, I've posted this question to my blog as well: http://blog.wolffmyren.com/2011/07/11/ie-protected-mode-ssl/)

Does anyone know how to work around Internet Explorer Protected Mode limitations without requiring the end-user to add our site to the Trusted Sites list?

The problem is that if we enable SSL logins for our site, they can only access SSL pages. IE prevents our non-SSL served pages from accessing the cookie created during the SSL session, so we can either serve everything via SSL (very expensive/resource-intensi?ve), or find some way to set an SSL and non-SSL cookie during the login process.

This MSDN article (What does ielowutil.exe have to do with Internet Explorer 8.0?) has the most relevant information I’ve found yet, but it discusses using Windows APIs, and I’m looking for a solution I can implement with ASP.NET, JavaScript, or some other well-delivered solution.



Update: A friend of mine shared these links, hopefully they'll help:


http://www.leastprivilege.com/PartiallySSLSecuredWebAppsWithASPNET.aspx
Partial SSL in ASP.NET Webforms without changing IIS configuration

View complete forum thread with replies

Other posts related to ielowutil.exe

See Related Forum Messages: Follow the Links Below to View Complete Thread

IE Protected Mode + SSL Login = No cookie for non-SSL pages
How to filter between junk exe files and workable exe files