Alex Rivera | Logout

Unencrypted SSL protocol?

Asked 2009-12-18T19:05:32.727
9

Is it possible to send a message over https that isn't encrypted? For example, require that certificate validation and authorization occur, but not encrypt the actual data being sent over the socket?

Edit
Report

1 Answer

-4

No, the protocol doesn't allow for that.

One solution you could do is connect over https, verify the connection, then drop subsequent connections to HTTP with a session cookie. Without that cookie, redirect back to https so that the client always connects over it.

This might not be relevant to you, though, so if you provide more information about the problem you're trying to solve we could be of more help.

answered 2009-12-18T19:09:00.037

Your Answer