Databases
StackOverflow2013
Postsdbo
PO
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>I'm assuming your question is this: can you force IE to prompt the user to install a (previously unknown) certificate, in order to enable an otherwise signed and safe ActiveX control to be run on a page? (If this isn't your question, comment and I can revise.)</p> <p><strong>Short answer: no.</strong> You'll need to shell out $$$ for code-signing cert from a trusted authority. (which is, AFAIK, different from a regular SSL cert)</p> <p><strong>Long answer:</strong></p> <p>From a security perspective, being signed with an unknown certificate is similar to being unsigned, because there's no trusted authority telling the client he can trust that code. And IE's default settings are not to allow unsigned ActiveX controls to be downloaded and used. </p> <p>If what you're trying to do were allowed, then a savvy attacker could simply create a cert, sign it, and thereby make it easier for users to run their attack code.</p> <p>There are certainly workarounds, but all involve clients taking action to change their IE settings, or (in an intranet setting) having administrators push out changes to client settings.</p> <p>Here's some more info on this from TechNet (<a href="http://technet.microsoft.com/en-us/library/cc505863.aspx" rel="nofollow noreferrer">http://technet.microsoft.com/en-us/library/cc505863.aspx</a>): </p> <blockquote> <p>Internet Explorer is not configured to trust the certificate authority Anyone, including attackers, can create their own CA and issue certificates. Therefore, Internet Explorer does not trust all CAs by default. Instead, Internet Explorer trusts only a handful of public CAs. If the certificate was issued by an untrusted CA and the website is on the public Internet, the server administrator should acquire a certificate from a trusted CA. If the website is on your intranet, a client administrator should configure Internet Explorer to trust the issuing CA.</p> </blockquote>
    singulars
    1. This table or related slice is empty.
    1. POPrompt the user to install ActiveX/.Net Class Library from browser
      singulars
      1. PTQuestion
    1. PTAnswer
    1. This table or related slice is empty.
    1. USJustin Grant
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. POPrompt the user to install ActiveX/.Net Class Library from browser
      singulars
      1. PTQuestion
    1. This table or related slice is empty.
    1. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTBountyClose
    1. COThanks Justin, you summed it up well. However, I find it a little bit overzealous not allowing unsigned code code at all (not even prompting). I would have prefferred a scary screen like the not-trusted HTTPS screen is, but with the option to ignore. It doesn't exist, does it?
      singulars
      1. PO
      1. USVlagged
    2. CONope. This scenario is not common enough to warrant a special screen. Also, since there's an easy workaround for a legitimate publisher (go buy a real cert or get your sysadmin to push your cert to clients!), there's little impetus for Microsoft to build special-case UI for this scenario.
      singulars
      1. PO
      1. USJustin Grant
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload