I am changing a customer web site to use https and certificates. The current
login.aspx page is called via http. Do all other pages that need to be
secure have to be in a separate set of web folders? For example, our login
page validates the user and if ok, send them to the home page which
currently is in the root of the web folder. Also, any reading on this that
would be helpful for me would be greatly appreciated. Thank you.

David

"David C" <dlchase [at] lifetimeinc.com> wrote in message
news:ezQJ6cZmIHA.4332 [at] TK2MSFTNGP05.phx.gbl...

> Do all other pages that need to be secure have to be in a separate set of
> web folders?

No, though that would make things a bit more manageable...

> Also, any reading on this that would be helpful for me would be greatly
> appreciated.

This is all you need:
http://www.codeproject.com/KB/web-security/WebPageSecurity_v 2.aspx?select=1095511&df=100&forumid=53615&exp=0

--
Mark Rae
ASP.NET MVP
http://www.markrae.net