Re: CF4.5 doesn't support Win2000 file encryption?

2000-04-02 Thread Jeff Beer

Picky picky...

The point was that IIS doesn't process the file - CF does.

- Original Message -
From: "Mike Sheldon" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 30, 2000 5:53 PM
Subject: RE: CF4.5 doesn't support Win2000 file encryption?


 Actually, IIS does NOT "shove the .cfm file to the CF parser sight unseen"

 IIS never touches .cfm files unless it's mis-configured, or has been told
to
 check for the file's existence before handing the request off. (Even then
it
 does not actually open the file, it just looks for it.). Why do you think
CF
 has its own 404 error pages?

 When IIS gets a request for a file ending in .cfm, it passes the *request*
 to CF. CF opens the file all by it's lonesome. You can prove this by
running
 CF under a user account and giving CF permission tot he files, but not
IIS.
 (or the other way around if you like errors)

 Michael J. Sheldon
 Internet Applications Developer
 Phone: 480.699.1084
 http://www.desertraven.com/
 PGP Key Available on Request

 -Original Message-
 From: Jeff Beer [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, March 30, 2000 14:22
 To: [EMAIL PROTECTED]
 Subject: Re: CF4.5 doesn't support Win2000 file encryption?


 It's not CF that doesn't support on the-fly-decrypting, it's the web
server.
 IIS just shoves the .cfm file to the CF parser sight unseen.  Of course CF
 chokes on the encrypted file - it look like garbage to the CF server.
Same
 with ASP, Perl, Tango, what have you.

 MS would need to build support for on-the-fly decryption into IIS.  I hope
 they don't, as it would incur far too much overhead.  What seems to be
 transparent to you when using MSWord or something becomes a huge issue
when
 multiplied by thousands of page hits.

 The real issue here is why would you want to use that form of encryption
 anyway? With the proper permissions set on NT, your code is safe.

 - Original Message -
 From: "Mike Amburn" [EMAIL PROTECTED]
 To: "Cf-Talk" [EMAIL PROTECTED]
 Sent: Wednesday, March 29, 2000 3:46 PM
 Subject: CF4.5 doesn't support Win2000 file encryption?


  This is a multi-part message in MIME format.
 
  --=_NextPart_000__01BF9995.F72A13D0
  Content-Type: text/plain;
  charset="iso-8859-1"
  Content-Transfer-Encoding: 7bit
 
  Windows 2000 allows you to encrypt files. ColdFusion does not seem to
  support this, as I get the following error on any page that I encrypt:
 
  The template file exists, however, it either cannot be opened for
reading,
  or it is encrypted and its data has been corrupted
 
  as soon as i unencrypt, all things are good to go.
 
  anyone heard anything about this? is allaire going to fix this in a
 service
  patch?
 
  Mike Amburn
  Application Development
 
  --=_NextPart_000__01BF9995.F72A13D0
  Content-Type: image/gif;
  name="atworklogo_very_small.gif"
  Content-Transfer-Encoding: base64
  Content-ID: 994194320@29032000-1c68
 
 

R0lGODlhhwAsAPcAAMDAwHNzc4SEhKWlpa2trdbW1ufn5+/v77Wtpf/nvffWnP/vzv/nte/WpXtr
 

Sv/WhPfv3vfWjO/OhPfGWvfGUvfOa++9OffWc+fGY+/GUue9Svfv1v/nnP/nlN7Gc97Ga+/GKffG
 

GOe1CPfGCP/GAJSMa+fWjFpSMf/WMee9GOe9APfGAN7Wrf/nc97GUv/eQufGKf/3xv/nUu/WSt7G
 

Of/ve9bGSu/npefWQt7OOf/3nP/3jP/3e//3Y6WlnM7Ovf//zv//xu/vra2te///td7elPf/vd7n
 

pdbn1qW9tWN7c87W1rW9vUpSUnuMjDFCQuf3/6W1vYyltb3Gzpylrd7v/4SMlGNrc0pSWtbe55Sc
 

pVJaY9bn/zFCWhAhOb3O56W1zmNzjL3G1pyltXuElFpjczlCUsbO3qWtvYSMnJytzjlKaxAhQhgx
 

YwgYOdbe787W57W9zq21xoyUpXN7jGtzhHOErWNznBApawgYQgghY73G3nuEnFpje5Sl1jlKezFC
 

cxgpWhAhUsbO56WtxpSctYyUrWNrhFJac0pSa2t7rWNzpSkxSkpajFJjnCk5axAhWggYSgAQQpyl
 

xoyc1oSUzjlCYzFChBghQhgpawAQStbe/7W93q211r3G73N7nGNrjFJae1pjjHOEzjE5WikxUiEp
 

Sik5exAYORAhawgYWoyUvWtznEpSe0JKcyExexAYQhgpewgQOcbO/62156Wt3pSczoSMvXuEtWNr
 

nDlCezE5ayEpWhghUrW994yUzoSMxkpSjCkxayEpYxAYUkJKjCkxcykxhCEpcyEpexAYWhAYYwgQ
 

Wufn787O1rW1vaWlrZycpdbW597e78bG1r29zpycrdbW72tre97e/4yMpb293lJSY7W13sbG94SE
 

pb2973t7nGtrjISEtSEhMTExSmNjpSEhQjExYzExawgIIca9xmtja/fn7wAA
 

ACH5BAEALACHACwA
 

QAj/AAEIHEiwoMGDCBMqXMiwocOHECNKLHigWho02yYqvDaslxaNIEO+OWXMi6kkY9oYCwSoChSC
 

tgJlWjamILheMxFVEWin1zA8vCC1eZRFYCGhmA4BsMPMmKBHhgYRLBBtDaY2gsIIFCCoVxdpBBcJ
 

aiPMG4BBXjJl+ghACjNkqAq1C6nQTiRjy0qFqtMnVJ8+ZUKRSnXMFCiBtQQtw0MF4RxNxpAdcxOK
 

oBQ3bTLFitUl20Bs6kixa0KIS0FPgIY9yhPmJRlVeLpsAhBOVi9BtQiCK5UJjyGBZCQN4+WHLsgD
 

KlbAsMDBiEQgQHRwaFEhQwYDCw1MmXaGyZmEU5ox/0TyA3vCAg7FxDHOvr17hQecERiw7oBCJAbm
 

vt/fEMqeOdgkws0VZFAhxxnTAGAfANPAEccY34SCSiTDGAMMfxgWxIkuyhijVhtRDATFGLZMMskq
 

haA4iRSTVHEIMcMo00hB2xgjDB6CLFKQL714aEYnBNGyiiKiNJKLId14BgAddAg0hSGrmGgiIZ1I
 

VRCUwCxRUCeTkCEFEhk2EskpmdgBABRo5oJMMpAUI9AGEBRiSiCBWGPQNFYJ84gvjQTSCyOmkQEJ
 

HplQMsoy6ESCBgCtmJLJMGYpROYwbqYB2zC5gGLOH2xEEskTjQEADjqQBNLIbYEokqFAaDSBSCiJ
 

fP93kAw4lHBCGYlsoZ5ffYSIkBh9JIIIWwRdww43JzjQwA0sCAGBiGKE04clpZRiSR/hUGPQAK0g
 

UkeCAlFzSCgDOgPA

RE: CF4.5 doesn't support Win2000 file encryption?

2000-03-31 Thread Dave Watts

 It's not CF that doesn't support on the-fly-decrypting, it's
 the web server. IIS just shoves the .cfm file to the CF parser
 sight unseen. Of course CF chokes on the encrypted file - it
 look like garbage to the CF server.  Same with ASP, Perl,
 Tango, what have you.

 MS would need to build support for on-the-fly decryption into
 IIS.  I hope they don't, as it would incur far too much overhead.
 What seems to be transparent to you when using MSWord or something
 becomes a huge issue when multiplied by thousands of page hits.

That's not exactly how Win2K's EFS works. It's built into NTFS, essentially,
so that if you're the user who encrypted the file in the first place, when
you request the file, it will automatically be decrypted for you. This
applies whether you're an interactive user, or a user account used by a
service. To use EFS with a service, you simply have to run the service as a
specific user, instead of the local system context. For services that
provide impersonation, like IIS, the user of the service will have to be the
one who encrypted the file in the first place.

 The real issue here is why would you want to use that form of
 encryption anyway? With the proper permissions set on NT, your
 code is safe.

That's right. EFS is not intended for use in this context. It's designed
mostly for mobile users, who might have critical files on their laptop.
Without EFS, once your laptop is stolen, the bad guy could install another
copy of NT or Win2K on it, then use administrative rights to take control of
the files. With EFS, the bad guy would either need to know the original
user's account and password, or the specific admin account reserved for data
retrieval, which in a Win2K domain environment would be a domain account.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=listsbody=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



RE: CF4.5 doesn't support Win2000 file encryption? - answer

2000-03-30 Thread Eddie Shipman

But you can cause your service to run under a spceific security
context. Basically, all services run using a service account unless
you specify that you want them to run under a different one.

Check with your NT Administrator on that one...You should be able to 
have the CF service "impersonate" another user to read those files.

 Just a guess here as I haven't tried EFS on a server yet, but I
 would think
 that since files are encrypted by and can only be read by 
the file owner
 (as I understand it) that the CF Server service would need to run
 under the
 context of the file owner - ie have the CF service login as 
that user.

thank you, someone that actually has constructive input to offer...

you are correct. after i RTF-Win2000-M, i found the following:

SNIP



**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**
--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=listsbody=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



RE: CF4.5 doesn't support Win2000 file encryption? - answer

2000-03-30 Thread Mike Sheldon

The system account does NOT have permissions accross the network. In fact,
the system account is pretty restricted in what it can do for security
reasons. The system account cannot access ANY user's accounts.

Michael J. Sheldon
Internet Applications Developer
Phone: 480.699.1084
http://www.desertraven.com/
PGP Key Available on Request

-Original Message-
From: Pecora, James [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 30, 2000 12:48
To: '[EMAIL PROTECTED]'
Subject: RE: CF4.5 doesn't support Win2000 file encryption? - answer


So here is a question:
CF is running under a service account - that has permissions across teh
network.

If the file in Question is encrypted under the Admin account - won't the
system have access to it then???



-Original Message-
From: Eddie Shipman [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 30, 2000 8:34 AM
To: [EMAIL PROTECTED]
Subject: RE: CF4.5 doesn't support Win2000 file encryption? - answer


But you can cause your service to run under a spceific security
context. Basically, all services run using a service account unless
you specify that you want them to run under a different one.

Check with your NT Administrator on that one...You should be able to
have the CF service "impersonate" another user to read those files.

 Just a guess here as I haven't tried EFS on a server yet, but I
 would think
 that since files are encrypted by and can only be read by
the file owner
 (as I understand it) that the CF Server service would need to run
 under the
 context of the file owner - ie have the CF service login as
that user.

thank you, someone that actually has constructive input to offer...

you are correct. after i RTF-Win2000-M, i found the following:

SNIP



**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=listsbody=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=listsbody=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=listsbody=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-30 Thread Jeff Beer

It's not CF that doesn't support on the-fly-decrypting, it's the web server.
IIS just shoves the .cfm file to the CF parser sight unseen.  Of course CF
chokes on the encrypted file - it look like garbage to the CF server.  Same
with ASP, Perl, Tango, what have you.

MS would need to build support for on-the-fly decryption into IIS.  I hope
they don't, as it would incur far too much overhead.  What seems to be
transparent to you when using MSWord or something becomes a huge issue when
multiplied by thousands of page hits.

The real issue here is why would you want to use that form of encryption
anyway? With the proper permissions set on NT, your code is safe.

- Original Message -
From: "Mike Amburn" [EMAIL PROTECTED]
To: "Cf-Talk" [EMAIL PROTECTED]
Sent: Wednesday, March 29, 2000 3:46 PM
Subject: CF4.5 doesn't support Win2000 file encryption?


 This is a multi-part message in MIME format.

 --=_NextPart_000__01BF9995.F72A13D0
 Content-Type: text/plain;
 charset="iso-8859-1"
 Content-Transfer-Encoding: 7bit

 Windows 2000 allows you to encrypt files. ColdFusion does not seem to
 support this, as I get the following error on any page that I encrypt:

 The template file exists, however, it either cannot be opened for reading,
 or it is encrypted and its data has been corrupted

 as soon as i unencrypt, all things are good to go.

 anyone heard anything about this? is allaire going to fix this in a
service
 patch?

 Mike Amburn
 Application Development

 --=_NextPart_000__01BF9995.F72A13D0
 Content-Type: image/gif;
 name="atworklogo_very_small.gif"
 Content-Transfer-Encoding: base64
 Content-ID: 994194320@29032000-1c68


R0lGODlhhwAsAPcAAMDAwHNzc4SEhKWlpa2trdbW1ufn5+/v77Wtpf/nvffWnP/vzv/nte/WpXtr

Sv/WhPfv3vfWjO/OhPfGWvfGUvfOa++9OffWc+fGY+/GUue9Svfv1v/nnP/nlN7Gc97Ga+/GKffG

GOe1CPfGCP/GAJSMa+fWjFpSMf/WMee9GOe9APfGAN7Wrf/nc97GUv/eQufGKf/3xv/nUu/WSt7G

Of/ve9bGSu/npefWQt7OOf/3nP/3jP/3e//3Y6WlnM7Ovf//zv//xu/vra2te///td7elPf/vd7n

pdbn1qW9tWN7c87W1rW9vUpSUnuMjDFCQuf3/6W1vYyltb3Gzpylrd7v/4SMlGNrc0pSWtbe55Sc

pVJaY9bn/zFCWhAhOb3O56W1zmNzjL3G1pyltXuElFpjczlCUsbO3qWtvYSMnJytzjlKaxAhQhgx

YwgYOdbe787W57W9zq21xoyUpXN7jGtzhHOErWNznBApawgYQgghY73G3nuEnFpje5Sl1jlKezFC

cxgpWhAhUsbO56WtxpSctYyUrWNrhFJac0pSa2t7rWNzpSkxSkpajFJjnCk5axAhWggYSgAQQpyl

xoyc1oSUzjlCYzFChBghQhgpawAQStbe/7W93q211r3G73N7nGNrjFJae1pjjHOEzjE5WikxUiEp

Sik5exAYORAhawgYWoyUvWtznEpSe0JKcyExexAYQhgpewgQOcbO/62156Wt3pSczoSMvXuEtWNr

nDlCezE5ayEpWhghUrW994yUzoSMxkpSjCkxayEpYxAYUkJKjCkxcykxhCEpcyEpexAYWhAYYwgQ

Wufn787O1rW1vaWlrZycpdbW597e78bG1r29zpycrdbW72tre97e/4yMpb293lJSY7W13sbG94SE

pb2973t7nGtrjISEtSEhMTExSmNjpSEhQjExYzExawgIIca9xmtja/fn7wAA

ACH5BAEALACHACwA

QAj/AAEIHEiwoMGDCBMqXMiwocOHECNKLHigWho02yYqvDaslxaNIEO+OWXMi6kkY9oYCwSoChSC

tgJlWjamILheMxFVEWin1zA8vCC1eZRFYCGhmA4BsMPMmKBHhgYRLBBtDaY2gsIIFCCoVxdpBBcJ

aiPMG4BBXjJl+ghACjNkqAq1C6nQTiRjy0qFqtMnVJ8+ZUKRSnXMFCiBtQQtw0MF4RxNxpAdcxOK

oBQ3bTLFitUl20Bs6kixa0KIS0FPgIY9yhPmJRlVeLpsAhBOVi9BtQiCK5UJjyGBZCQN4+WHLsgD

KlbAsMDBiEQgQHRwaFEhQwYDCw1MmXaGyZmEU5ox/0TyA3vCAg7FxDHOvr17hQecERiw7oBCJAbm

vt/fEMqeOdgkws0VZFAhxxnTAGAfANPAEccY34SCSiTDGAMMfxgWxIkuyhijVhtRDATFGLZMMskq

haA4iRSTVHEIMcMo00hB2xgjDB6CLFKQL714aEYnBNGyiiKiNJKLId14BgAddAg0hSGrmGgiIZ1I

VRCUwCxRUCeTkCEFEhk2EskpmdgBABRo5oJMMpAUI9AGEBRiSiCBWGPQNFYJ84gvjQTSCyOmkQEJ

HplQMsoy6ESCBgCtmJLJMGYpROYwbqYB2zC5gGLOH2xEEskTjQEADjqQBNLIbYEokqFAaDSBSCiJ

fP93kAw4lHBCGYlsoZ5ffYSIkBh9JIIIWwRdww43JzjQwA0sCAGBiGKE04clpZRiSR/hUGPQAK0g

UkeCAlFzSCgDOgPAGX2IEsozBYkjTiJ1oLeqQjeYYAMNKeSrb74wwIDBBxKYkMACxp3BjkB0aHGG

AHMkAsAS0kBjJzdvpGHIG30MEs41AByyxzdgfMMHAIawAkYhnXxzDSgrg7FNOIWA8gkYVzbZhxiD

pEHNFlnENy+GVVwDhjZ1FFOMLrukk84aruQyTiez/Sz1qllQQ4c4VshBkH4ONbMKOrwQ48TU+3VS

LSm8dKOgQ4ScA/Yu4EhTzRTyAjMMG4Ac9E0v6Jz/c4h5DE1jRhlku/eFJcS0gcxMeDBipSfo9NJL

OjDyogwvkaDzxhvFQKJWqABcww2MeuBhii0DNROKKcMQ881ZhxgjSRuQQKKKIIG00QYzyezyy0Bp

KNPGMMLY2EsebuRhiRoCcYIJMszUJFAnfUSShyucrFpFIjGasgpPdymzhmkDrWIK7dIT9A2dptwC

gDe89GKKHbWUEoseSmVjSS+88DJLJcoYRiCU8BKE8AESwpDEHQBghWW0oRSzIAguehGJUuzhLOcj

BiGqIIo8EAMQb5gXF/qwjEw8QhilYEOnMMELZOAhFqmogzTgZIte0M5OBunE+TLxCmTcZg4CMcAf

/2TSQ2RgojVLyUNmmpSQOQwvEouAwmsy8QdbhAIWqpkE+QQyi1K0AQ+d8AYgTCGJRoQwQ2noHy+C

gRAgDIEUpohck2rBCwGCziCLgIUwlGGJLxCEC4K6hIcQAAAjCIEIQmBCAEqhDqEEYhiQzEQbiBGI

UBBiIE5QBSTQwTEATAITiQpFJ3cjyUUJpBvoyIQyENHJwgEAAiRQgQeI8B4dSCcCDWCAK3cJEQpo

QAQiGEEIZNADDuggCMhMpg52UIMayGAGOaCBDVxgggY8yyEFcAY1yDCNZzTjDUsAFzW0lAQ6hPNc

0hjEGc8gKzrYaRrUANcZqGGIM0jvDHB4yTSuIf+rgVihDgDYAz8LmIV1TKUovNTIMxKRoCloAyxn

sMIYziCNOdhJolZQGB2ogYY4TMEaBbACGphAhTOkwUF1sKjVqiGHek4DDWg4gzWYAI2BEE0adYip

Fpwxh2fQbQwGTahQh0rU9kwjC0jAD+CKylSQVGMM4rCEKchxjnNAUhjCABsmYDEhUoRCa00N60GW

YIhgHcIQ1ChgQzbxCWNgLh1iEGtTpfGMOQhgG0qiCyvCNja5OoQa1agGuyKChj10Iq4CWQcB5CCN

bHhiDxc0SAGqcYbAQiRyU/BrQ8KBClNEAhOigMg1ygGLXmBiHAYJBSbyMAywDiQb6IAkKl7HEPv/

oCERQNLsQr6RuZUYQxkBGMggGIGKCWGCFKXABCpkwYg3EGJ4KjmjQKzRC+HhYQ1RE8gvOqSMPggk


RE: CF4.5 doesn't support Win2000 file encryption?

2000-03-30 Thread Mike Sheldon

Actually, IIS does NOT "shove the .cfm file to the CF parser sight unseen"

IIS never touches .cfm files unless it's mis-configured, or has been told to
check for the file's existence before handing the request off. (Even then it
does not actually open the file, it just looks for it.). Why do you think CF
has its own 404 error pages?

When IIS gets a request for a file ending in .cfm, it passes the *request*
to CF. CF opens the file all by it's lonesome. You can prove this by running
CF under a user account and giving CF permission tot he files, but not IIS.
(or the other way around if you like errors)

Michael J. Sheldon
Internet Applications Developer
Phone: 480.699.1084
http://www.desertraven.com/
PGP Key Available on Request

-Original Message-
From: Jeff Beer [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 30, 2000 14:22
To: [EMAIL PROTECTED]
Subject: Re: CF4.5 doesn't support Win2000 file encryption?


It's not CF that doesn't support on the-fly-decrypting, it's the web server.
IIS just shoves the .cfm file to the CF parser sight unseen.  Of course CF
chokes on the encrypted file - it look like garbage to the CF server.  Same
with ASP, Perl, Tango, what have you.

MS would need to build support for on-the-fly decryption into IIS.  I hope
they don't, as it would incur far too much overhead.  What seems to be
transparent to you when using MSWord or something becomes a huge issue when
multiplied by thousands of page hits.

The real issue here is why would you want to use that form of encryption
anyway? With the proper permissions set on NT, your code is safe.

- Original Message -
From: "Mike Amburn" [EMAIL PROTECTED]
To: "Cf-Talk" [EMAIL PROTECTED]
Sent: Wednesday, March 29, 2000 3:46 PM
Subject: CF4.5 doesn't support Win2000 file encryption?


 This is a multi-part message in MIME format.

 --=_NextPart_000__01BF9995.F72A13D0
 Content-Type: text/plain;
 charset="iso-8859-1"
 Content-Transfer-Encoding: 7bit

 Windows 2000 allows you to encrypt files. ColdFusion does not seem to
 support this, as I get the following error on any page that I encrypt:

 The template file exists, however, it either cannot be opened for reading,
 or it is encrypted and its data has been corrupted

 as soon as i unencrypt, all things are good to go.

 anyone heard anything about this? is allaire going to fix this in a
service
 patch?

 Mike Amburn
 Application Development

 --=_NextPart_000__01BF9995.F72A13D0
 Content-Type: image/gif;
 name="atworklogo_very_small.gif"
 Content-Transfer-Encoding: base64
 Content-ID: 994194320@29032000-1c68


R0lGODlhhwAsAPcAAMDAwHNzc4SEhKWlpa2trdbW1ufn5+/v77Wtpf/nvffWnP/vzv/nte/WpXtr

Sv/WhPfv3vfWjO/OhPfGWvfGUvfOa++9OffWc+fGY+/GUue9Svfv1v/nnP/nlN7Gc97Ga+/GKffG

GOe1CPfGCP/GAJSMa+fWjFpSMf/WMee9GOe9APfGAN7Wrf/nc97GUv/eQufGKf/3xv/nUu/WSt7G

Of/ve9bGSu/npefWQt7OOf/3nP/3jP/3e//3Y6WlnM7Ovf//zv//xu/vra2te///td7elPf/vd7n

pdbn1qW9tWN7c87W1rW9vUpSUnuMjDFCQuf3/6W1vYyltb3Gzpylrd7v/4SMlGNrc0pSWtbe55Sc

pVJaY9bn/zFCWhAhOb3O56W1zmNzjL3G1pyltXuElFpjczlCUsbO3qWtvYSMnJytzjlKaxAhQhgx

YwgYOdbe787W57W9zq21xoyUpXN7jGtzhHOErWNznBApawgYQgghY73G3nuEnFpje5Sl1jlKezFC

cxgpWhAhUsbO56WtxpSctYyUrWNrhFJac0pSa2t7rWNzpSkxSkpajFJjnCk5axAhWggYSgAQQpyl

xoyc1oSUzjlCYzFChBghQhgpawAQStbe/7W93q211r3G73N7nGNrjFJae1pjjHOEzjE5WikxUiEp

Sik5exAYORAhawgYWoyUvWtznEpSe0JKcyExexAYQhgpewgQOcbO/62156Wt3pSczoSMvXuEtWNr

nDlCezE5ayEpWhghUrW994yUzoSMxkpSjCkxayEpYxAYUkJKjCkxcykxhCEpcyEpexAYWhAYYwgQ

Wufn787O1rW1vaWlrZycpdbW597e78bG1r29zpycrdbW72tre97e/4yMpb293lJSY7W13sbG94SE

pb2973t7nGtrjISEtSEhMTExSmNjpSEhQjExYzExawgIIca9xmtja/fn7wAA

ACH5BAEALACHACwA

QAj/AAEIHEiwoMGDCBMqXMiwocOHECNKLHigWho02yYqvDaslxaNIEO+OWXMi6kkY9oYCwSoChSC

tgJlWjamILheMxFVEWin1zA8vCC1eZRFYCGhmA4BsMPMmKBHhgYRLBBtDaY2gsIIFCCoVxdpBBcJ

aiPMG4BBXjJl+ghACjNkqAq1C6nQTiRjy0qFqtMnVJ8+ZUKRSnXMFCiBtQQtw0MF4RxNxpAdcxOK

oBQ3bTLFitUl20Bs6kixa0KIS0FPgIY9yhPmJRlVeLpsAhBOVi9BtQiCK5UJjyGBZCQN4+WHLsgD

KlbAsMDBiEQgQHRwaFEhQwYDCw1MmXaGyZmEU5ox/0TyA3vCAg7FxDHOvr17hQecERiw7oBCJAbm

vt/fEMqeOdgkws0VZFAhxxnTAGAfANPAEccY34SCSiTDGAMMfxgWxIkuyhijVhtRDATFGLZMMskq

haA4iRSTVHEIMcMo00hB2xgjDB6CLFKQL714aEYnBNGyiiKiNJKLId14BgAddAg0hSGrmGgiIZ1I

VRCUwCxRUCeTkCEFEhk2EskpmdgBABRo5oJMMpAUI9AGEBRiSiCBWGPQNFYJ84gvjQTSCyOmkQEJ

HplQMsoy6ESCBgCtmJLJMGYpROYwbqYB2zC5gGLOH2xEEskTjQEADjqQBNLIbYEokqFAaDSBSCiJ

fP93kAw4lHBCGYlsoZ5ffYSIkBh9JIIIWwRdww43JzjQwA0sCAGBiGKE04clpZRiSR/hUGPQAK0g

UkeCAlFzSCgDOgPAGX2IEsozBYkjTiJ1oLeqQjeYYAMNKeSrb74wwIDBBxKYkMACxp3BjkB0aHGG

AHMkAsAS0kBjJzdvpGHIG30MEs41AByyxzdgfMMHAIawAkYhnXxzDSgrg7FNOIWA8gkYVzbZhxiD

pEHNFlnENy+GVVwDhjZ1FFOMLrukk84aruQyTiez/Sz1qllQQ4c4VshBkH4ONbMKOrwQ48TU+3VS

LSm8dKOgQ4ScA/Yu4EhTzRTyAjMMG4Ac9E0v6Jz/c4h5DE1jRhlku/eFJcS0gcxMeDBipSfo9NJL

OjDyogwvkaDzxhvFQKJWqABcww2MeuBhii0DNROKKcMQ881ZhxgjSRuQQKKKIIG00QYzyezyy0Bp

KNPGMMLY2EsebuRhiRoCcYIJMszUJFAnfUSShyucrFpFIjGasg

Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread Michael Dinowitz

Forgive me for asking, but if MS gives a new 'feature' that will effect CF,
Perl, Rebol and almost every non-MS scripting language, why would you think
it needs a fix from Allaire?

 Windows 2000 allows you to encrypt files. ColdFusion does not seem to
 support this, as I get the following error on any page that I encrypt:

 The template file exists, however, it either cannot be opened for reading,
 or it is encrypted and its data has been corrupted

 as soon as i unencrypt, all things are good to go.

 anyone heard anything about this? is allaire going to fix this in a
service
 patch?


--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=listsbody=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread Rey Bango

Mike,

I wouldn't expect it to be dealt with. That's a feature of Win2K to help
protect your files in an internal, corporate environment. MS would have to
allow 3rd party vendors access to their unecryption algorithms in order to
do this. This would essentially negate any security that encryption might
offer you.

As a side note, the admins of CF-Talk list have disabled file attachment
capabilities because of a virus scare so any messages w/ attached files are
coming out screwy. Would you mind removing your atworklogo_very_small.gif 
Glacier Bkgrd.jpg files from your messages.

Thanks,

Rey...
Certified Allaire Instructor
Member of Team Allaire

"A browser's beauty, at its heart, is its usefulness as a *TOOL*."


- Original Message -
From: "Mike Amburn" [EMAIL PROTECTED]
To: "Cf-Talk" [EMAIL PROTECTED]
Sent: Wednesday, March 29, 2000 3:46 PM
Subject: CF4.5 doesn't support Win2000 file encryption?


 This is a multi-part message in MIME format.

 --=_NextPart_000__01BF9995.F72A13D0
 Content-Type: text/plain;
 charset="iso-8859-1"
 Content-Transfer-Encoding: 7bit

 Windows 2000 allows you to encrypt files. ColdFusion does not seem to
 support this, as I get the following error on any page that I encrypt:

 The template file exists, however, it either cannot be opened for reading,
 or it is encrypted and its data has been corrupted

 as soon as i unencrypt, all things are good to go.

 anyone heard anything about this? is allaire going to fix this in a
service
 patch?

 Mike Amburn
 Application Development

 --=_NextPart_000__01BF9995.F72A13D0
 Content-Type: image/gif;
 name="atworklogo_very_small.gif"
 Content-Transfer-Encoding: base64
 Content-ID: 994194320@29032000-1c68


R0lGODlhhwAsAPcAAMDAwHNzc4SEhKWlpa2trdbW1ufn5+/v77Wtpf/nvffWnP/vzv/nte/WpXtr

Sv/WhPfv3vfWjO/OhPfGWvfGUvfOa++9OffWc+fGY+/GUue9Svfv1v/nnP/nlN7Gc97Ga+/GKffG

GOe1CPfGCP/GAJSMa+fWjFpSMf/WMee9GOe9APfGAN7Wrf/nc97GUv/eQufGKf/3xv/nUu/WSt7G

Of/ve9bGSu/npefWQt7OOf/3nP/3jP/3e//3Y6WlnM7Ovf//zv//xu/vra2te///td7elPf/vd7n

pdbn1qW9tWN7c87W1rW9vUpSUnuMjDFCQuf3/6W1vYyltb3Gzpylrd7v/4SMlGNrc0pSWtbe55Sc

pVJaY9bn/zFCWhAhOb3O56W1zmNzjL3G1pyltXuElFpjczlCUsbO3qWtvYSMnJytzjlKaxAhQhgx

YwgYOdbe787W57W9zq21xoyUpXN7jGtzhHOErWNznBApawgYQgghY73G3nuEnFpje5Sl1jlKezFC

cxgpWhAhUsbO56WtxpSctYyUrWNrhFJac0pSa2t7rWNzpSkxSkpajFJjnCk5axAhWggYSgAQQpyl

xoyc1oSUzjlCYzFChBghQhgpawAQStbe/7W93q211r3G73N7nGNrjFJae1pjjHOEzjE5WikxUiEp

Sik5exAYORAhawgYWoyUvWtznEpSe0JKcyExexAYQhgpewgQOcbO/62156Wt3pSczoSMvXuEtWNr

nDlCezE5ayEpWhghUrW994yUzoSMxkpSjCkxayEpYxAYUkJKjCkxcykxhCEpcyEpexAYWhAYYwgQ

Wufn787O1rW1vaWlrZycpdbW597e78bG1r29zpycrdbW72tre97e/4yMpb293lJSY7W13sbG94SE

pb2973t7nGtrjISEtSEhMTExSmNjpSEhQjExYzExawgIIca9xmtja/fn7wAA

ACH5BAEALACHACwA

QAj/AAEIHEiwoMGDCBMqXMiwocOHECNKLHigWho02yYqvDaslxaNIEO+OWXMi6kkY9oYCwSoChSC

tgJlWjamILheMxFVEWin1zA8vCC1eZRFYCGhmA4BsMPMmKBHhgYRLBBtDaY2gsIIFCCoVxdpBBcJ

aiPMG4BBXjJl+ghACjNkqAq1C6nQTiRjy0qFqtMnVJ8+ZUKRSnXMFCiBtQQtw0MF4RxNxpAdcxOK

oBQ3bTLFitUl20Bs6kixa0KIS0FPgIY9yhPmJRlVeLpsAhBOVi9BtQiCK5UJjyGBZCQN4+WHLsgD

KlbAsMDBiEQgQHRwaFEhQwYDCw1MmXaGyZmEU5ox/0TyA3vCAg7FxDHOvr17hQecERiw7oBCJAbm

vt/fEMqeOdgkws0VZFAhxxnTAGAfANPAEccY34SCSiTDGAMMfxgWxIkuyhijVhtRDATFGLZMMskq

haA4iRSTVHEIMcMo00hB2xgjDB6CLFKQL714aEYnBNGyiiKiNJKLId14BgAddAg0hSGrmGgiIZ1I

VRCUwCxRUCeTkCEFEhk2EskpmdgBABRo5oJMMpAUI9AGEBRiSiCBWGPQNFYJ84gvjQTSCyOmkQEJ

HplQMsoy6ESCBgCtmJLJMGYpROYwbqYB2zC5gGLOH2xEEskTjQEADjqQBNLIbYEokqFAaDSBSCiJ

fP93kAw4lHBCGYlsoZ5ffYSIkBh9JIIIWwRdww43JzjQwA0sCAGBiGKE04clpZRiSR/hUGPQAK0g

UkeCAlFzSCgDOgPAGX2IEsozBYkjTiJ1oLeqQjeYYAMNKeSrb74wwIDBBxKYkMACxp3BjkB0aHGG

AHMkAsAS0kBjJzdvpGHIG30MEs41AByyxzdgfMMHAIawAkYhnXxzDSgrg7FNOIWA8gkYVzbZhxiD

pEHNFlnENy+GVVwDhjZ1FFOMLrukk84aruQyTiez/Sz1qllQQ4c4VshBkH4ONbMKOrwQ48TU+3VS

LSm8dKOgQ4ScA/Yu4EhTzRTyAjMMG4Ac9E0v6Jz/c4h5DE1jRhlku/eFJcS0gcxMeDBipSfo9NJL

OjDyogwvkaDzxhvFQKJWqABcww2MeuBhii0DNROKKcMQ881ZhxgjSRuQQKKKIIG00QYzyezyy0Bp

KNPGMMLY2EsebuRhiRoCcYIJMszUJFAnfUSShyucrFpFIjGasgpPdymzhmkDrWIK7dIT9A2dptwC

gDe89GKKHbWUEoseSmVjSS+88DJLJcoYRiCU8BKE8AESwpDEHQBghWW0oRSzIAguehGJUuzhLOcj

BiGqIIo8EAMQb5gXF/qwjEw8QhilYEOnMMELZOAhFqmogzTgZIte0M5OBunE+TLxCmTcZg4CMcAf

/2TSQ2RgojVLyUNmmpSQOQwvEouAwmsy8QdbhAIWqpkE+QQyi1K0AQ+d8AYgTCGJRoQwQ2noHy+C

gRAgDIEUpohck2rBCwGCziCLgIUwlGGJLxCEC4K6hIcQAAAjCIEIQmBCAEqhDqEEYhiQzEQbiBGI

UBBiIE5QBSTQwTEATAITiQpFJ3cjyUUJpBvoyIQyENHJwgEAAiRQgQeI8B4dSCcCDWCAK3cJEQpo

QAQiGEEIZNADDuggCMhMpg52UIMayGAGOaCBDVxgggY8yyEFcAY1yDCNZzTjDUsAFzW0lAQ6hPNc

0hjEGc8gKzrYaRrUANcZqGGIM0jvDHB4yTSuIf+rgVihDgDYAz8LmIV1TKUovNTIMxKRoCloAyxn

sMIYziCNOdhJolZQGB2ogYY4TMEaBbACGphAhTOkwUF1sKjVqiGHek4DDWg4gzWYAI2BEE0adYip

Fpwxh2fQbQwGTahQh0rU9kwjC0jAD+CKylSQVGMM4rCEKchxjnNAUhjCABsmYDEhUoRCa00N60GW

YIhgHcIQ1ChgQzbxCWNgLh1iEGtTpfGMOQhgG0qiCyvCNja5OoQa1agGuyKChj10Iq4CWQcB5CCN

bHhiDxc0SAGqcYbAQiRyU/BrQ8KBClNEAhOigMg1ygGLXmBiHAYJBSbyMAywDiQb6IAkKl7HEPv/


Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread Fred Sanders

maybe you shouldn't let MS encrypt the pages and just let CF do the work
like its supposed to if something is going to go through two
encryption/decryption processes from two different servers what is going to
define which goes first common sense
- Original Message -
From: "Michael Dinowitz" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, March 29, 2000 3:33 PM
Subject: Re: CF4.5 doesn't support Win2000 file encryption?


 Forgive me for asking, but if MS gives a new 'feature' that will effect
CF,
 Perl, Rebol and almost every non-MS scripting language, why would you
think
 it needs a fix from Allaire?
 
  Windows 2000 allows you to encrypt files. ColdFusion does not seem to
  support this, as I get the following error on any page that I encrypt:
 
  The template file exists, however, it either cannot be opened for
reading,
  or it is encrypted and its data has been corrupted
 
  as soon as i unencrypt, all things are good to go.
 
  anyone heard anything about this? is allaire going to fix this in a
 service
  patch?


 --

 Archives: http://www.eGroups.com/list/cf-talk
 To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=listsbody=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=listsbody=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread JF

Mike -

Just a guess here as I haven't tried EFS on a server yet, but I would think 
that since files are encrypted by and can only be read by the file owner 
(as I understand it) that the CF Server service would need to run under the 
context of the file owner - ie have the CF service login as that user.

Jay

At 04:27 PM 3/29/2000 -0500, you wrote:
Mike,

I wouldn't expect it to be dealt with. That's a feature of Win2K to help
protect your files in an internal, corporate environment. MS would have to
allow 3rd party vendors access to their unecryption algorithms in order to
do this. This would essentially negate any security that encryption might
offer you.

As a side note, the admins of CF-Talk list have disabled file attachment
capabilities because of a virus scare so any messages w/ attached files are
coming out screwy. Would you mind removing your atworklogo_very_small.gif 
Glacier Bkgrd.jpg files from your messages.

Thanks,

Rey...
Certified Allaire Instructor
Member of Team Allaire

"A browser's beauty, at its heart, is its usefulness as a *TOOL*."


- Original Message -
From: "Mike Amburn" [EMAIL PROTECTED]
To: "Cf-Talk" [EMAIL PROTECTED]
Sent: Wednesday, March 29, 2000 3:46 PM
Subject: CF4.5 doesn't support Win2000 file encryption?


  This is a multi-part message in MIME format.
 
  --=_NextPart_000__01BF9995.F72A13D0
  Content-Type: text/plain;
  charset="iso-8859-1"
  Content-Transfer-Encoding: 7bit
 
  Windows 2000 allows you to encrypt files. ColdFusion does not seem to
  support this, as I get the following error on any page that I encrypt:
 
  The template file exists, however, it either cannot be opened for reading,
  or it is encrypted and its data has been corrupted
 
  as soon as i unencrypt, all things are good to go.
 
  anyone heard anything about this? is allaire going to fix this in a
service
  patch?
 
  Mike Amburn
  Application Development
 
  --=_NextPart_000__01BF9995.F72A13D0
  Content-Type: image/gif;

[Ugly GIF garbage removed...]

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=listsbody=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.