Secure file downloads IIS 8

Google's PageSpeed platform offers insights, recommendations, and tools to automatically comply with best practices from the web performance optimization industry. Let the server resize, crop, and process your images without sacrificing speed or scalability. Supports scaling, cropping, rotating, flipping, stretching, padding, borders, transparency, jpeg, png, gif, bmp, tiff, and psd formats. Used by dozens of commercial CMS systems and hundreds of web sites, this module has an unparalleled satisfaction rate and Justin Mrkva Justin Mrkva 2 2 gold badges 9 9 silver badges 21 21 bronze badges.

Add a comment. Active Oldest Votes. Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Who owns this outage? Building intelligent escalation chains for modern SRE. Zistoloen 9, 6 6 gold badges 33 33 silver badges 59 59 bronze badges. Wade73 Wade73 3 3 bronze badges. Add a comment. Active Oldest Votes.

Depending on how serious your client is about security, two questions that you might want to further consider for downloads are: 1. Can a hacker replace download files with deleterious ones? You'll also want to make sure access to your server through Remote Desktop Services is disabled unless needed: Disabling Remote Desktop Services features Lastly, you might want to review other areas of security for IIS: Configuring Security 2.

Is the file downloaded the same as the original one? Improve this answer. The client is putting the files on the site, so I am not concerned about that. What I am afraid of is that there might be some way to intercept or capture the file information as it is being downloaded.

I have heard of man-in-the middle attacks, but is there some other potential way a hacker could get the downloaded file? There's not much to be concerned with while the file is in transit over SSL - after all, this is the same cryptography that banks use. The areas to be concerned with are who can access the files on the server i.

Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password.