Re: CF4.5 doesn't support Win2000 file encryption?

2000-04-02 Thread Jeff Beer

Picky picky...

The point was that IIS doesn't process the file - CF does.

- Original Message -
From: "Mike Sheldon" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, March 30, 2000 5:53 PM
Subject: RE: CF4.5 doesn't support Win2000 file encryption?


> Actually, IIS does NOT "shove the .cfm file to the CF parser sight unseen"
>
> IIS never touches .cfm files unless it's mis-configured, or has been told
to
> check for the file's existence before handing the request off. (Even then
it
> does not actually open the file, it just looks for it.). Why do you think
CF
> has its own 404 error pages?
>
> When IIS gets a request for a file ending in .cfm, it passes the *request*
> to CF. CF opens the file all by it's lonesome. You can prove this by
running
> CF under a user account and giving CF permission tot he files, but not
IIS.
> (or the other way around if you like errors)
>
> Michael J. Sheldon
> Internet Applications Developer
> Phone: 480.699.1084
> http://www.desertraven.com/
> PGP Key Available on Request
>
> -Original Message-
> From: Jeff Beer [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, March 30, 2000 14:22
> To: [EMAIL PROTECTED]
> Subject: Re: CF4.5 doesn't support Win2000 file encryption?
>
>
> It's not CF that doesn't support on the-fly-decrypting, it's the web
server.
> IIS just shoves the .cfm file to the CF parser sight unseen.  Of course CF
> chokes on the encrypted file - it look like garbage to the CF server.
Same
> with ASP, Perl, Tango, what have you.
>
> MS would need to build support for on-the-fly decryption into IIS.  I hope
> they don't, as it would incur far too much overhead.  What seems to be
> transparent to you when using MSWord or something becomes a huge issue
when
> multiplied by thousands of page hits.
>
> The real issue here is why would you want to use that form of encryption
> anyway? With the proper permissions set on NT, your code is safe.
>
> - Original Message -
> From: "Mike Amburn" <[EMAIL PROTECTED]>
> To: "Cf-Talk" <[EMAIL PROTECTED]>
> Sent: Wednesday, March 29, 2000 3:46 PM
> Subject: CF4.5 doesn't support Win2000 file encryption?
>
>
> > This is a multi-part message in MIME format.
> >
> > --=_NextPart_000__01BF9995.F72A13D0
> > Content-Type: text/plain;
> > charset="iso-8859-1"
> > Content-Transfer-Encoding: 7bit
> >
> > Windows 2000 allows you to encrypt files. ColdFusion does not seem to
> > support this, as I get the following error on any page that I encrypt:
> >
> > The template file exists, however, it either cannot be opened for
reading,
> > or it is encrypted and its data has been corrupted
> >
> > as soon as i unencrypt, all things are good to go.
> >
> > anyone heard anything about this? is allaire going to fix this in a
> service
> > patch?
> >
> > Mike Amburn
> > Application Development
> >
> > --=_NextPart_000__01BF9995.F72A13D0
> > Content-Type: image/gif;
> > name="atworklogo_very_small.gif"
> > Content-Transfer-Encoding: base64
> > Content-ID: <994194320@29032000-1c68>
> >
> >
>
R0lGODlhhwAsAPcAAMDAwHNzc4SEhKWlpa2trdbW1ufn5+/v77Wtpf/nvffWnP/vzv/nte/WpXtr
> >
>
Sv/WhPfv3vfWjO/OhPfGWvfGUvfOa++9OffWc+fGY+/GUue9Svfv1v/nnP/nlN7Gc97Ga+/GKffG
> >
>
GOe1CPfGCP/GAJSMa+fWjFpSMf/WMee9GOe9APfGAN7Wrf/nc97GUv/eQufGKf/3xv/nUu/WSt7G
> >
>
Of/ve9bGSu/npefWQt7OOf/3nP/3jP/3e//3Y6WlnM7Ovf//zv//xu/vra2te///td7elPf/vd7n
> >
>
pdbn1qW9tWN7c87W1rW9vUpSUnuMjDFCQuf3/6W1vYyltb3Gzpylrd7v/4SMlGNrc0pSWtbe55Sc
> >
>
pVJaY9bn/zFCWhAhOb3O56W1zmNzjL3G1pyltXuElFpjczlCUsbO3qWtvYSMnJytzjlKaxAhQhgx
> >
>
YwgYOdbe787W57W9zq21xoyUpXN7jGtzhHOErWNznBApawgYQgghY73G3nuEnFpje5Sl1jlKezFC
> >
>
cxgpWhAhUsbO56WtxpSctYyUrWNrhFJac0pSa2t7rWNzpSkxSkpajFJjnCk5axAhWggYSgAQQpyl
> >
>
xoyc1oSUzjlCYzFChBghQhgpawAQStbe/7W93q211r3G73N7nGNrjFJae1pjjHOEzjE5WikxUiEp
> >
>
Sik5exAYORAhawgYWoyUvWtznEpSe0JKcyExexAYQhgpewgQOcbO/62156Wt3pSczoSMvXuEtWNr
> >
>
nDlCezE5ayEpWhghUrW994yUzoSMxkpSjCkxayEpYxAYUkJKjCkxcykxhCEpcyEpexAYWhAYYwgQ
> >
>
Wufn787O1rW1vaWlrZycpdbW597e78bG1r29zpycrdbW72tre97e/4yMpb293lJSY7W13sbG94SE
> >
>
pb2973t7nGtrjISEtSEhMTExSmNjpSEhQjExYzExawgIIca9xmtja/fn7wAA
> >
>
ACH5BAEALACHACwA
> >
>
QAj/AAEIHEiwoMGDCBMqXMiwocOHECNKLHigWho02yYqvDaslxaNIEO+OWXMi6kkY9oYCwSoChSC
> >
>
tgJlWjamILheMxFVEWin1zA8vCC1eZRFYCGhmA4BsMPMmKBHhgYRLBBtDaY2gsIIFCCo

RE: CF4.5 doesn't support Win2000 file encryption?

2000-04-02 Thread Dave Watts

> Actually, IIS does NOT "shove the .cfm file to the CF parser
> sight unseen"
>
> IIS never touches .cfm files unless it's mis-configured, or
> has been told to check for the file's existence before handing
> the request off. (Even then it does not actually open the file,
> it just looks for it.). Why do you think CF has its own 404 error
> pages?
>
> When IIS gets a request for a file ending in .cfm, it passes
> the *request* to CF. CF opens the file all by it's lonesome. You
> can prove this by running CF under a user account and giving CF
> permission tot he files, but not IIS. (or the other way around
> if you like errors)

This doesn't seem to be exactly correct. IIS does check file ACLs - it has
to. It performs an impersonation using either the anonymous user account, or
using the authenticated user account when Basic Authentication or NTLM
Authentication are required. If the CF service has read/execute rights to a
file, but the IIS impersonation user account doesn't, IIS will return a 401
error message - access denied. I tested this by creating a user account,
running CF with that user account, removing permissions from a specific file
except for that user account, then attempting to access the file using
anonymous access first, then Basic Authentication.

Of course, you could make the argument that reading a file's ACL isn't quite
the same thing as reading the file itself.

I'm not sure how this plays out when you request a nonexistent CF script; CF
obviously returns the fake 404 error message. I don't know what the order of
events is for this.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



RE: CF4.5 doesn't support Win2000 file encryption? - answer

2000-03-31 Thread Dave Watts

> So here is a question:
> CF is running under a service account - that has permissions
> across the network.
>
> If the file in Question is encrypted under the Admin account
> - won't the system have access to it then???

No, it won't. The Local System security context isn't a user account, per
se. You'd have to run the service as the specific user who encrypted the
file in the first place. Also, the Local System security context has no
network rights.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



RE: CF4.5 doesn't support Win2000 file encryption?

2000-03-31 Thread Dave Watts

> It's not CF that doesn't support on the-fly-decrypting, it's
> the web server. IIS just shoves the .cfm file to the CF parser
> sight unseen. Of course CF chokes on the encrypted file - it
> look like garbage to the CF server.  Same with ASP, Perl,
> Tango, what have you.
>
> MS would need to build support for on-the-fly decryption into
> IIS.  I hope they don't, as it would incur far too much overhead.
> What seems to be transparent to you when using MSWord or something
> becomes a huge issue when multiplied by thousands of page hits.

That's not exactly how Win2K's EFS works. It's built into NTFS, essentially,
so that if you're the user who encrypted the file in the first place, when
you request the file, it will automatically be decrypted for you. This
applies whether you're an interactive user, or a user account used by a
service. To use EFS with a service, you simply have to run the service as a
specific user, instead of the local system context. For services that
provide impersonation, like IIS, the user of the service will have to be the
one who encrypted the file in the first place.

> The real issue here is why would you want to use that form of
> encryption anyway? With the proper permissions set on NT, your
> code is safe.

That's right. EFS is not intended for use in this context. It's designed
mostly for mobile users, who might have critical files on their laptop.
Without EFS, once your laptop is stolen, the bad guy could install another
copy of NT or Win2K on it, then use administrative rights to take control of
the files. With EFS, the bad guy would either need to know the original
user's account and password, or the specific admin account reserved for data
retrieval, which in a Win2K domain environment would be a domain account.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



RE: CF4.5 doesn't support Win2000 file encryption?

2000-03-30 Thread Mike Sheldon

Actually, IIS does NOT "shove the .cfm file to the CF parser sight unseen"

IIS never touches .cfm files unless it's mis-configured, or has been told to
check for the file's existence before handing the request off. (Even then it
does not actually open the file, it just looks for it.). Why do you think CF
has its own 404 error pages?

When IIS gets a request for a file ending in .cfm, it passes the *request*
to CF. CF opens the file all by it's lonesome. You can prove this by running
CF under a user account and giving CF permission tot he files, but not IIS.
(or the other way around if you like errors)

Michael J. Sheldon
Internet Applications Developer
Phone: 480.699.1084
http://www.desertraven.com/
PGP Key Available on Request

-Original Message-
From: Jeff Beer [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 30, 2000 14:22
To: [EMAIL PROTECTED]
Subject: Re: CF4.5 doesn't support Win2000 file encryption?


It's not CF that doesn't support on the-fly-decrypting, it's the web server.
IIS just shoves the .cfm file to the CF parser sight unseen.  Of course CF
chokes on the encrypted file - it look like garbage to the CF server.  Same
with ASP, Perl, Tango, what have you.

MS would need to build support for on-the-fly decryption into IIS.  I hope
they don't, as it would incur far too much overhead.  What seems to be
transparent to you when using MSWord or something becomes a huge issue when
multiplied by thousands of page hits.

The real issue here is why would you want to use that form of encryption
anyway? With the proper permissions set on NT, your code is safe.

- Original Message -
From: "Mike Amburn" <[EMAIL PROTECTED]>
To: "Cf-Talk" <[EMAIL PROTECTED]>
Sent: Wednesday, March 29, 2000 3:46 PM
Subject: CF4.5 doesn't support Win2000 file encryption?


> This is a multi-part message in MIME format.
>
> --=_NextPart_000__01BF9995.F72A13D0
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: 7bit
>
> Windows 2000 allows you to encrypt files. ColdFusion does not seem to
> support this, as I get the following error on any page that I encrypt:
>
> The template file exists, however, it either cannot be opened for reading,
> or it is encrypted and its data has been corrupted
>
> as soon as i unencrypt, all things are good to go.
>
> anyone heard anything about this? is allaire going to fix this in a
service
> patch?
>
> Mike Amburn
> Application Development
>
> --=_NextPart_000__01BF9995.F72A13D0
> Content-Type: image/gif;
> name="atworklogo_very_small.gif"
> Content-Transfer-Encoding: base64
> Content-ID: <994194320@29032000-1c68>
>
>
R0lGODlhhwAsAPcAAMDAwHNzc4SEhKWlpa2trdbW1ufn5+/v77Wtpf/nvffWnP/vzv/nte/WpXtr
>
Sv/WhPfv3vfWjO/OhPfGWvfGUvfOa++9OffWc+fGY+/GUue9Svfv1v/nnP/nlN7Gc97Ga+/GKffG
>
GOe1CPfGCP/GAJSMa+fWjFpSMf/WMee9GOe9APfGAN7Wrf/nc97GUv/eQufGKf/3xv/nUu/WSt7G
>
Of/ve9bGSu/npefWQt7OOf/3nP/3jP/3e//3Y6WlnM7Ovf//zv//xu/vra2te///td7elPf/vd7n
>
pdbn1qW9tWN7c87W1rW9vUpSUnuMjDFCQuf3/6W1vYyltb3Gzpylrd7v/4SMlGNrc0pSWtbe55Sc
>
pVJaY9bn/zFCWhAhOb3O56W1zmNzjL3G1pyltXuElFpjczlCUsbO3qWtvYSMnJytzjlKaxAhQhgx
>
YwgYOdbe787W57W9zq21xoyUpXN7jGtzhHOErWNznBApawgYQgghY73G3nuEnFpje5Sl1jlKezFC
>
cxgpWhAhUsbO56WtxpSctYyUrWNrhFJac0pSa2t7rWNzpSkxSkpajFJjnCk5axAhWggYSgAQQpyl
>
xoyc1oSUzjlCYzFChBghQhgpawAQStbe/7W93q211r3G73N7nGNrjFJae1pjjHOEzjE5WikxUiEp
>
Sik5exAYORAhawgYWoyUvWtznEpSe0JKcyExexAYQhgpewgQOcbO/62156Wt3pSczoSMvXuEtWNr
>
nDlCezE5ayEpWhghUrW994yUzoSMxkpSjCkxayEpYxAYUkJKjCkxcykxhCEpcyEpexAYWhAYYwgQ
>
Wufn787O1rW1vaWlrZycpdbW597e78bG1r29zpycrdbW72tre97e/4yMpb293lJSY7W13sbG94SE
>
pb2973t7nGtrjISEtSEhMTExSmNjpSEhQjExYzExawgIIca9xmtja/fn7wAA
>
ACH5BAEALACHACwA
>
QAj/AAEIHEiwoMGDCBMqXMiwocOHECNKLHigWho02yYqvDaslxaNIEO+OWXMi6kkY9oYCwSoChSC
>
tgJlWjamILheMxFVEWin1zA8vCC1eZRFYCGhmA4BsMPMmKBHhgYRLBBtDaY2gsIIFCCoVxdpBBcJ
>
aiPMG4BBXjJl+ghACjNkqAq1C6nQTiRjy0qFqtMnVJ8+ZUKRSnXMFCiBtQQtw0MF4RxNxpAdcxOK
>
oBQ3bTLFitUl20Bs6kixa0KIS0FPgIY9yhPmJRlVeLpsAhBOVi9BtQiCK5UJjyGBZCQN4+WHLsgD
>
KlbAsMDBiEQgQHRwaFEhQwYDCw1MmXaGyZmEU5ox/0TyA3vCAg7FxDHOvr17hQecERiw7oBCJAbm
>
vt/fEMqeOdgkws0VZFAhxxnTAGAfANPAEccY34SCSiTDGAMMfxgWxIkuyhijVhtRDATFGLZMMskq
>
haA4iRSTVHEIMcMo00hB2xgjDB6CLFKQL714aEYnBNGyiiKiNJKLId14BgAddAg0hSGrmGgiIZ1I
>
VRCUwCxRUCeTkCEFEhk2EskpmdgBABRo5oJMMpAUI9AGEBRiSiCBWGPQNFYJ84gvjQTSCyOmkQEJ
>
HplQMsoy6ESCBgCtmJLJMGYpROYwbqYB2zC5gGLOH2xEEskTjQEADjqQBNLIbYEokqFAaDSBSCiJ
>
fP93kAw4lHBCGYlsoZ5ffYSIkBh9JIIIWwRdww43JzjQwA0sCAGBiGKE04clpZRiSR/hUGPQAK0g
>
UkeCAlFzSCgDOgPAGX2IEsozBYkjTiJ1oLeqQjeYYAMNKeSrb74wwIDBBxKYkMACxp3BjkB0aHGG
>
AHMkAsAS0kBjJzdvpGHIG30MEs41AByyxzdgfMMHA

Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-30 Thread Jeff Beer

It's not CF that doesn't support on the-fly-decrypting, it's the web server.
IIS just shoves the .cfm file to the CF parser sight unseen.  Of course CF
chokes on the encrypted file - it look like garbage to the CF server.  Same
with ASP, Perl, Tango, what have you.

MS would need to build support for on-the-fly decryption into IIS.  I hope
they don't, as it would incur far too much overhead.  What seems to be
transparent to you when using MSWord or something becomes a huge issue when
multiplied by thousands of page hits.

The real issue here is why would you want to use that form of encryption
anyway? With the proper permissions set on NT, your code is safe.

- Original Message -
From: "Mike Amburn" <[EMAIL PROTECTED]>
To: "Cf-Talk" <[EMAIL PROTECTED]>
Sent: Wednesday, March 29, 2000 3:46 PM
Subject: CF4.5 doesn't support Win2000 file encryption?


> This is a multi-part message in MIME format.
>
> --=_NextPart_000__01BF9995.F72A13D0
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: 7bit
>
> Windows 2000 allows you to encrypt files. ColdFusion does not seem to
> support this, as I get the following error on any page that I encrypt:
>
> The template file exists, however, it either cannot be opened for reading,
> or it is encrypted and its data has been corrupted
>
> as soon as i unencrypt, all things are good to go.
>
> anyone heard anything about this? is allaire going to fix this in a
service
> patch?
>
> Mike Amburn
> Application Development
>
> --=_NextPart_000__01BF9995.F72A13D0
> Content-Type: image/gif;
> name="atworklogo_very_small.gif"
> Content-Transfer-Encoding: base64
> Content-ID: <994194320@29032000-1c68>
>
>
R0lGODlhhwAsAPcAAMDAwHNzc4SEhKWlpa2trdbW1ufn5+/v77Wtpf/nvffWnP/vzv/nte/WpXtr
>
Sv/WhPfv3vfWjO/OhPfGWvfGUvfOa++9OffWc+fGY+/GUue9Svfv1v/nnP/nlN7Gc97Ga+/GKffG
>
GOe1CPfGCP/GAJSMa+fWjFpSMf/WMee9GOe9APfGAN7Wrf/nc97GUv/eQufGKf/3xv/nUu/WSt7G
>
Of/ve9bGSu/npefWQt7OOf/3nP/3jP/3e//3Y6WlnM7Ovf//zv//xu/vra2te///td7elPf/vd7n
>
pdbn1qW9tWN7c87W1rW9vUpSUnuMjDFCQuf3/6W1vYyltb3Gzpylrd7v/4SMlGNrc0pSWtbe55Sc
>
pVJaY9bn/zFCWhAhOb3O56W1zmNzjL3G1pyltXuElFpjczlCUsbO3qWtvYSMnJytzjlKaxAhQhgx
>
YwgYOdbe787W57W9zq21xoyUpXN7jGtzhHOErWNznBApawgYQgghY73G3nuEnFpje5Sl1jlKezFC
>
cxgpWhAhUsbO56WtxpSctYyUrWNrhFJac0pSa2t7rWNzpSkxSkpajFJjnCk5axAhWggYSgAQQpyl
>
xoyc1oSUzjlCYzFChBghQhgpawAQStbe/7W93q211r3G73N7nGNrjFJae1pjjHOEzjE5WikxUiEp
>
Sik5exAYORAhawgYWoyUvWtznEpSe0JKcyExexAYQhgpewgQOcbO/62156Wt3pSczoSMvXuEtWNr
>
nDlCezE5ayEpWhghUrW994yUzoSMxkpSjCkxayEpYxAYUkJKjCkxcykxhCEpcyEpexAYWhAYYwgQ
>
Wufn787O1rW1vaWlrZycpdbW597e78bG1r29zpycrdbW72tre97e/4yMpb293lJSY7W13sbG94SE
>
pb2973t7nGtrjISEtSEhMTExSmNjpSEhQjExYzExawgIIca9xmtja/fn7wAA
>
ACH5BAEALACHACwA
>
QAj/AAEIHEiwoMGDCBMqXMiwocOHECNKLHigWho02yYqvDaslxaNIEO+OWXMi6kkY9oYCwSoChSC
>
tgJlWjamILheMxFVEWin1zA8vCC1eZRFYCGhmA4BsMPMmKBHhgYRLBBtDaY2gsIIFCCoVxdpBBcJ
>
aiPMG4BBXjJl+ghACjNkqAq1C6nQTiRjy0qFqtMnVJ8+ZUKRSnXMFCiBtQQtw0MF4RxNxpAdcxOK
>
oBQ3bTLFitUl20Bs6kixa0KIS0FPgIY9yhPmJRlVeLpsAhBOVi9BtQiCK5UJjyGBZCQN4+WHLsgD
>
KlbAsMDBiEQgQHRwaFEhQwYDCw1MmXaGyZmEU5ox/0TyA3vCAg7FxDHOvr17hQecERiw7oBCJAbm
>
vt/fEMqeOdgkws0VZFAhxxnTAGAfANPAEccY34SCSiTDGAMMfxgWxIkuyhijVhtRDATFGLZMMskq
>
haA4iRSTVHEIMcMo00hB2xgjDB6CLFKQL714aEYnBNGyiiKiNJKLId14BgAddAg0hSGrmGgiIZ1I
>
VRCUwCxRUCeTkCEFEhk2EskpmdgBABRo5oJMMpAUI9AGEBRiSiCBWGPQNFYJ84gvjQTSCyOmkQEJ
>
HplQMsoy6ESCBgCtmJLJMGYpROYwbqYB2zC5gGLOH2xEEskTjQEADjqQBNLIbYEokqFAaDSBSCiJ
>
fP93kAw4lHBCGYlsoZ5ffYSIkBh9JIIIWwRdww43JzjQwA0sCAGBiGKE04clpZRiSR/hUGPQAK0g
>
UkeCAlFzSCgDOgPAGX2IEsozBYkjTiJ1oLeqQjeYYAMNKeSrb74wwIDBBxKYkMACxp3BjkB0aHGG
>
AHMkAsAS0kBjJzdvpGHIG30MEs41AByyxzdgfMMHAIawAkYhnXxzDSgrg7FNOIWA8gkYVzbZhxiD
>
pEHNFlnENy+GVVwDhjZ1FFOMLrukk84aruQyTiez/Sz1qllQQ4c4VshBkH4ONbMKOrwQ48TU+3VS
>
LSm8dKOgQ4ScA/Yu4EhTzRTyAjMMG4Ac9E0v6Jz/c4h5DE1jRhlku/eFJcS0gcxMeDBipSfo9NJL
>
OjDyogwvkaDzxhvFQKJWqABcww2MeuBhii0DNROKKcMQ881ZhxgjSRuQQKKKIIG00QYzyezyy0Bp
>
KNPGMMLY2EsebuRhiRoCcYIJMszUJFAnfUSShyucrFpFIjGasgpPdymzhmkDrWIK7dIT9A2dptwC
>
gDe89GKKHbWUEoseSmVjSS+88DJLJcoYRiCU8BKE8AESwpDEHQBghWW0oRSzIAguehGJUuzhLOcj
>
BiGqIIo8EAMQb5gXF/qwjEw8QhilYEOnMMELZOAhFqmogzTgZIte0M5OBunE+TLxCmTcZg4CMcAf
>
/2TSQ2RgojVLyUNmmpSQOQwvEouAwmsy8QdbhAIWqpkE+QQyi1K0AQ+d8AYgTCGJRoQwQ2noHy+C
>
gRAgDIEUpohck2rBCwGCziCLgIUwlGGJLxCEC4K6hIcQAAAjCIEIQmBCAEqhDqEEYhiQzEQbiBGI
>
UBBiIE5QBSTQwTEATAITiQpFJ3cjyUUJpBvoyIQyENHJwgEAAiRQgQeI8B4dSCcCDWCAK3cJEQpo
>
QAQiGEEIZNADDuggCMhMpg52UIMayGAGOaCBDVxgggY8yyEFcAY1yDCNZzTjDUsAFzW0lAQ6hPNc
>
0hjEGc8gKzrYaRrUANcZqGGIM0jvDHB4yTSuIf+rgVihDgDYAz8LmIV1TKUovNTIMxKRoCloAyxn
>
sMIYziCNOdhJolZQGB2ogYY4TMEaBbACGphAhTOkwUF1sKjVqiGHek4DDWg4gzWYAI2BEE0adYip
>
Fpwxh2fQbQwGTahQh0rU9kwjC0jAD+CKylSQVGMM4rCEKchxjnNAUhjCABsmYDEhUoRCa00N60GW
>
YIhgHcIQ1ChgQzbxCWNgLh1iEGtTpfGMOQhgG0qiCyvCNja5OoQa1agGuyKChj10Iq4CWQcB5CCN
>
bHhiDxc0SAGqcYbAQiRyU/BrQ8KBClNEAhOigMg1ygGLXmBiHAYJBSbyMAywDiQb6IAkKl7HEPv/
>
oCERQNLsQr6RuZUYQxkBGMggGIGKCWGCFKXABCpkwYg3EGJ4KjmjQKz

RE: CF4.5 doesn't support Win2000 file encryption? - answer

2000-03-30 Thread Mike Sheldon

The system account does NOT have permissions accross the network. In fact,
the system account is pretty restricted in what it can do for security
reasons. The system account cannot access ANY user's accounts.

Michael J. Sheldon
Internet Applications Developer
Phone: 480.699.1084
http://www.desertraven.com/
PGP Key Available on Request

-Original Message-
From: Pecora, James [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 30, 2000 12:48
To: '[EMAIL PROTECTED]'
Subject: RE: CF4.5 doesn't support Win2000 file encryption? - answer


So here is a question:
CF is running under a service account - that has permissions across teh
network.

If the file in Question is encrypted under the Admin account - won't the
system have access to it then???



-Original Message-
From: Eddie Shipman [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 30, 2000 8:34 AM
To: [EMAIL PROTECTED]
Subject: RE: CF4.5 doesn't support Win2000 file encryption? - answer


But you can cause your service to run under a spceific security
context. Basically, all services run using a service account unless
you specify that you want them to run under a different one.

Check with your NT Administrator on that one...You should be able to
have the CF service "impersonate" another user to read those files.
>
>> Just a guess here as I haven't tried EFS on a server yet, but I
>> would think
>> that since files are encrypted by and can only be read by
>the file owner
>> (as I understand it) that the CF Server service would need to run
>> under the
>> context of the file owner - ie have the CF service login as
>that user.
>
>thank you, someone that actually has constructive input to offer...
>
>you are correct. after i RTF-Win2000-M, i found the following:
>




**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



RE: CF4.5 doesn't support Win2000 file encryption? - answer

2000-03-30 Thread Eddie Shipman

It should but are you logged in as administrator? The services
use the System account. I don't know how to impersonate that account
using a login...

>So here is a question:
>CF is running under a service account - that has permissions across teh
>network.
>
>If the file in Question is encrypted under the Admin account - 
>won't the
>system have access to it then???
>
>From: Eddie Shipman [mailto:[EMAIL PROTECTED]]
>
>But you can cause your service to run under a spceific security
>context. Basically, all services run using a service account unless
>you specify that you want them to run under a different one.
>
>Check with your NT Administrator on that one...You should be able to 
>have the CF service "impersonate" another user to read those files.
>>
>>> Just a guess here as I haven't tried EFS on a server yet, but I
>>> would think
>>> that since files are encrypted by and can only be read by 
>>the file owner
>>> (as I understand it) that the CF Server service would need to run
>>> under the
>>> context of the file owner - ie have the CF service login as 
>>that user.
>>
>>thank you, someone that actually has constructive input to offer...
>>
>>you are correct. after i RTF-Win2000-M, i found the following:
>>
>



**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**
--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



RE: CF4.5 doesn't support Win2000 file encryption? - answer

2000-03-30 Thread Pecora, James

So here is a question:
CF is running under a service account - that has permissions across teh
network.

If the file in Question is encrypted under the Admin account - won't the
system have access to it then???



-Original Message-
From: Eddie Shipman [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 30, 2000 8:34 AM
To: [EMAIL PROTECTED]
Subject: RE: CF4.5 doesn't support Win2000 file encryption? - answer


But you can cause your service to run under a spceific security
context. Basically, all services run using a service account unless
you specify that you want them to run under a different one.

Check with your NT Administrator on that one...You should be able to 
have the CF service "impersonate" another user to read those files.
>
>> Just a guess here as I haven't tried EFS on a server yet, but I
>> would think
>> that since files are encrypted by and can only be read by 
>the file owner
>> (as I understand it) that the CF Server service would need to run
>> under the
>> context of the file owner - ie have the CF service login as 
>that user.
>
>thank you, someone that actually has constructive input to offer...
>
>you are correct. after i RTF-Win2000-M, i found the following:
>




**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



RE: CF4.5 doesn't support Win2000 file encryption? - answer

2000-03-30 Thread Eddie Shipman

But you can cause your service to run under a spceific security
context. Basically, all services run using a service account unless
you specify that you want them to run under a different one.

Check with your NT Administrator on that one...You should be able to 
have the CF service "impersonate" another user to read those files.
>
>> Just a guess here as I haven't tried EFS on a server yet, but I
>> would think
>> that since files are encrypted by and can only be read by 
>the file owner
>> (as I understand it) that the CF Server service would need to run
>> under the
>> context of the file owner - ie have the CF service login as 
>that user.
>
>thank you, someone that actually has constructive input to offer...
>
>you are correct. after i RTF-Win2000-M, i found the following:
>




**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**
--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: CF4.5 doesn't support Win2000 file encryption? WTF!?!?

2000-03-29 Thread Rey Bango

> first off, i have cf-talk set to send "plain text only", so if any
> attachments are being sent, that's news to me. granted i'll figure out why
> outlook is still sending them, but no need to give a speech like i haven't
> been reading this list forever and a day.

Wow. That's a pretty rude response. I give you a simple heads-up about the
fact that your email programming is embedding two graphic images and you
need to slam me for it. Take a pill or something, man.

> i posted to get answers, to see if anyone else has run into this. isn't
that
> the point of a discussion group, to help each other out? i'm quite
> disappointed that the first replies i get are "that's microsoft's problem,
> not ours" and "well, don't do that again".

Mike, you're definitely overreacting. I made an attempt to answer your
question. I may be wrong but I tried to lend some insight as to why you may
be having the problem. In addition, in your first post, you didn't put
anywhere near the amount of detail that you just did on your response to me.

My apologies for trying to help.

Rey...


--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread Michael Dinowitz

Any scripting language has to read a file containing the code to run. It
doesn't matter if its CF, Perl, Rebol or even Asp. If the file is encrypted,
then the script engine can not read the file nor can it run the script. I'm
assuming that MS has something built into asp to automatically decode the
file for use, but no other script engine has that ability. They can not
unless MS gives out the encryption code and they integrate it into the
engine. As Rey said, this would render the whole thing useless.
Using this logic, I can say that every scripting language will be effected
by this.

- Original Message -
From: "William James" <[EMAIL PROTECTED]>

> On the other hand, who says that they all have problems with it? Maybe
only
> Cold Fusion does. Unless someone's tried them all, I don't think you can
say
> one way or the other who's problem it is, but I do think that Allaire is
the
> ones who would need to fix it. As well as each of the others. You don't
have
> to use the MS Encryption (I don't see why you would need to), but if you
do,
> you have to use products that work with it. It is not up to MS to make
sure
> their technology works with other programming languages unless they said
the
> encryption process is for use with them. That's like saying MS has to make
> drivers for Windows 2000 for all of your hardware. They don't. The
hardware
> manufacturer should make the drivers for windows 2000 if they want their
> hardware to work in Windows2000. MS has done an awesome job of making sure
> most stuff works, but I've read too many hardware sites that say, "MS has
a
> pretty good driver for our hardware and although it could be better, we
> aren't going to bother making a new one".
> - Original Message -
> From: "Michael Dinowitz" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, March 29, 2000 1:33 PM
> Subject: Re: CF4.5 doesn't support Win2000 file encryption?
>
>
> > Forgive me for asking, but if MS gives a new 'feature' that will effect
> CF,
> > Perl, Rebol and almost every non-MS scripting language, why would you
> think
> > it needs a fix from Allaire?
> > >
> > > Windows 2000 allows you to encrypt files. ColdFusion does not seem to
> > > support this, as I get the following error on any page that I encrypt:
> > >
> > > The template file exists, however, it either cannot be opened for
> reading,
> > > or it is encrypted and its data has been corrupted
> > >
> > > as soon as i unencrypt, all things are good to go.
> > >
> > > anyone heard anything about this? is allaire going to fix this in a
> > service
> > > patch?
> >
> >
>
> --
> 
> > Archives: http://www.eGroups.com/list/cf-talk
> > To Unsubscribe visit
> http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
> send a message to [EMAIL PROTECTED] with 'unsubscribe' in
> the body.
> >
>
> --

> Archives: http://www.eGroups.com/list/cf-talk
> To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
>

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



RE: CF4.5 doesn't support Win2000 file encryption? - answer

2000-03-29 Thread Mike Amburn

> Just a guess here as I haven't tried EFS on a server yet, but I
> would think
> that since files are encrypted by and can only be read by the file owner
> (as I understand it) that the CF Server service would need to run
> under the
> context of the file owner - ie have the CF service login as that user.

thank you, someone that actually has constructive input to offer...

you are correct. after i RTF-Win2000-M, i found the following:

--
Accessing encrypted data
Users access encrypted files just as they do unencrypted files. Thus, when a
user accesses an encrypted file that is stored on disk, the user is able to
read the contents of the file in the normal way. When the user stores the
file on disk again, EFS transparently encrypts the file again.

Only the user that encrypted a file can access it later. This is assured
because users have private keys that allow them access to their own
encrypted files. If another user tries to access an encrypted file, that
user receives an Access Denied message.
--

so i am assuming that anything that runs as a service or using a system
account (IIS, CF, SQL Server, backup server) will not be able to read a file
that is encrypted by me using the Win2000 file encryption. that's an
important feature, i'd say.

mike

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



RE: CF4.5 doesn't support Win2000 file encryption? WTF!?!?

2000-03-29 Thread Mike Amburn

first off, i have cf-talk set to send "plain text only", so if any
attachments are being sent, that's news to me. granted i'll figure out why
outlook is still sending them, but no need to give a speech like i haven't
been reading this list forever and a day.

second... i can encrypt a file and have no problem opening it in
 - Microsoft Word
 - Netscape Navigator
 - ColdFusion Studio
that's because the encryption is being handled by the OS/file system. i
assume it's decrypted before streaming to the application and then
re-encrypted with each save. So no encrypting algorithm is needed by third
party vendors if the OS is handling it, as it is.

now, the only problem i have is when i attempt to access it through a web
server. this applies to *.cfm (and as i've learned in the last hour) *.html
and *.asp. apparently the functions that decrypt the file for desktop
applications is not being run by the web server (IIS5 in my case). whether
this is a securiy feature of IIS5, a security feature for any web server
running on Win2000, or a bug i have no idea.

i posted to get answers, to see if anyone else has run into this. isn't that
the point of a discussion group, to help each other out? i'm quite
disappointed that the first replies i get are "that's microsoft's problem,
not ours" and "well, don't do that again". geez, guys... what's up with
that? i've seen too many great discussions and ideas come out of this list
than to get replies like that...

mike


> -Original Message-
> From: Rey Bango [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, March 29, 2000 4:27 PM
> To: [EMAIL PROTECTED]
> Subject: Re: CF4.5 doesn't support Win2000 file encryption?
>
>
> Mike,
>
> I wouldn't expect it to be dealt with. That's a feature of Win2K to help
> protect your files in an internal, corporate environment. MS would have to
> allow 3rd party vendors access to their unecryption algorithms in order to
> do this. This would essentially negate any security that encryption might
> offer you.
>
> As a side note, the admins of CF-Talk list have disabled file attachment
> capabilities because of a virus scare so any messages w/ attached
> files are
> coming out screwy. Would you mind removing your
> atworklogo_very_small.gif &
> Glacier Bkgrd.jpg files from your messages.
>
> Thanks,
>
> Rey...
> Certified Allaire Instructor
> Member of Team Allaire
>
> "A browser's beauty, at its heart, is its usefulness as a *TOOL*."
>
>
> - Original Message -
> From: "Mike Amburn" <[EMAIL PROTECTED]>
> To: "Cf-Talk" <[EMAIL PROTECTED]>
> Sent: Wednesday, March 29, 2000 3:46 PM
> Subject: CF4.5 doesn't support Win2000 file encryption?
>
>
> > This is a multi-part message in MIME format.
> >
> > --=_NextPart_000__01BF9995.F72A13D0
> > Content-Type: text/plain;
> > charset="iso-8859-1"
> > Content-Transfer-Encoding: 7bit
> >
> > Windows 2000 allows you to encrypt files. ColdFusion does not seem to
> > support this, as I get the following error on any page that I encrypt:
> >
> > The template file exists, however, it either cannot be opened
> for reading,
> > or it is encrypted and its data has been corrupted
> >
> > as soon as i unencrypt, all things are good to go.
> >
> > anyone heard anything about this? is allaire going to fix this in a
> service
> > patch?
> >
> > Mike Amburn
> > Application Development

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread JF

Mike -

Just a guess here as I haven't tried EFS on a server yet, but I would think 
that since files are encrypted by and can only be read by the file owner 
(as I understand it) that the CF Server service would need to run under the 
context of the file owner - ie have the CF service login as that user.

Jay

At 04:27 PM 3/29/2000 -0500, you wrote:
>Mike,
>
>I wouldn't expect it to be dealt with. That's a feature of Win2K to help
>protect your files in an internal, corporate environment. MS would have to
>allow 3rd party vendors access to their unecryption algorithms in order to
>do this. This would essentially negate any security that encryption might
>offer you.
>
>As a side note, the admins of CF-Talk list have disabled file attachment
>capabilities because of a virus scare so any messages w/ attached files are
>coming out screwy. Would you mind removing your atworklogo_very_small.gif &
>Glacier Bkgrd.jpg files from your messages.
>
>Thanks,
>
>Rey...
>Certified Allaire Instructor
>Member of Team Allaire
>
>"A browser's beauty, at its heart, is its usefulness as a *TOOL*."
>
>
>- Original Message -
>From: "Mike Amburn" <[EMAIL PROTECTED]>
>To: "Cf-Talk" <[EMAIL PROTECTED]>
>Sent: Wednesday, March 29, 2000 3:46 PM
>Subject: CF4.5 doesn't support Win2000 file encryption?
>
>
> > This is a multi-part message in MIME format.
> >
> > --=_NextPart_000__01BF9995.F72A13D0
> > Content-Type: text/plain;
> > charset="iso-8859-1"
> > Content-Transfer-Encoding: 7bit
> >
> > Windows 2000 allows you to encrypt files. ColdFusion does not seem to
> > support this, as I get the following error on any page that I encrypt:
> >
> > The template file exists, however, it either cannot be opened for reading,
> > or it is encrypted and its data has been corrupted
> >
> > as soon as i unencrypt, all things are good to go.
> >
> > anyone heard anything about this? is allaire going to fix this in a
>service
> > patch?
> >
> > Mike Amburn
> > Application Development
> >
> > --=_NextPart_000__01BF9995.F72A13D0
> > Content-Type: image/gif;

[Ugly GIF garbage removed...]

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread Judah McAuley

At 02:10 PM 3/29/00 -0800, you wrote:
>On the other hand, who says that they all have problems with it? Maybe only
>Cold Fusion does. Unless someone's tried them all, I don't think you can say
>one way or the other who's problem it is, but I do think that Allaire is the
>ones who would need to fix it. As well as each of the others. You don't have
>to use the MS Encryption (I don't see why you would need to), but if you do,
>you have to use products that work with it. It is not up to MS to make sure
>their technology works with other programming languages unless they said the
>encryption process is for use with them. That's like saying MS has to make
>drivers for Windows 2000 for all of your hardware. They don't. The hardware
>manufacturer should make the drivers for windows 2000 if they want their
>hardware to work in Windows2000. MS has done an awesome job of making sure
>most stuff works, but I've read too many hardware sites that say, "MS has a
>pretty good driver for our hardware and although it could be better, we
>aren't going to bother making a new one".

Actually, sounds like CF 4.5 does work with W2K encryption.  CF reports 
that it cant' read the file.  That's because it's encrypted.  File 
encryption is supposed to make the files unreadable except by the 
encrypting/unencrypting program.  Wordpad can normally read .cfm files, but 
if you use CF's code encryption, Wordpad can no longer open the files.  No 
one seems to be complaining about that, it works as it's supposed to.  Why 
is anyone complaining about W2K file encryption not being able to be undone 
by other programs?

Judah
(who is in a contrary mood today...no offense intended to anyone)


--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread Fred Sanders

maybe you shouldn't let MS encrypt the pages and just let CF do the work
like its supposed to if something is going to go through two
encryption/decryption processes from two different servers what is going to
define which goes first common sense
- Original Message -
From: "Michael Dinowitz" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, March 29, 2000 3:33 PM
Subject: Re: CF4.5 doesn't support Win2000 file encryption?


> Forgive me for asking, but if MS gives a new 'feature' that will effect
CF,
> Perl, Rebol and almost every non-MS scripting language, why would you
think
> it needs a fix from Allaire?
> >
> > Windows 2000 allows you to encrypt files. ColdFusion does not seem to
> > support this, as I get the following error on any page that I encrypt:
> >
> > The template file exists, however, it either cannot be opened for
reading,
> > or it is encrypted and its data has been corrupted
> >
> > as soon as i unencrypt, all things are good to go.
> >
> > anyone heard anything about this? is allaire going to fix this in a
> service
> > patch?
>
>
> --

> Archives: http://www.eGroups.com/list/cf-talk
> To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread William James

On the other hand, who says that they all have problems with it? Maybe only
Cold Fusion does. Unless someone's tried them all, I don't think you can say
one way or the other who's problem it is, but I do think that Allaire is the
ones who would need to fix it. As well as each of the others. You don't have
to use the MS Encryption (I don't see why you would need to), but if you do,
you have to use products that work with it. It is not up to MS to make sure
their technology works with other programming languages unless they said the
encryption process is for use with them. That's like saying MS has to make
drivers for Windows 2000 for all of your hardware. They don't. The hardware
manufacturer should make the drivers for windows 2000 if they want their
hardware to work in Windows2000. MS has done an awesome job of making sure
most stuff works, but I've read too many hardware sites that say, "MS has a
pretty good driver for our hardware and although it could be better, we
aren't going to bother making a new one".
- Original Message -
From: "Michael Dinowitz" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, March 29, 2000 1:33 PM
Subject: Re: CF4.5 doesn't support Win2000 file encryption?


> Forgive me for asking, but if MS gives a new 'feature' that will effect
CF,
> Perl, Rebol and almost every non-MS scripting language, why would you
think
> it needs a fix from Allaire?
> >
> > Windows 2000 allows you to encrypt files. ColdFusion does not seem to
> > support this, as I get the following error on any page that I encrypt:
> >
> > The template file exists, however, it either cannot be opened for
reading,
> > or it is encrypted and its data has been corrupted
> >
> > as soon as i unencrypt, all things are good to go.
> >
> > anyone heard anything about this? is allaire going to fix this in a
> service
> > patch?
>
>
> --

> Archives: http://www.eGroups.com/list/cf-talk
> To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
>

--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.



Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread Rey Bango

Mike,

I wouldn't expect it to be dealt with. That's a feature of Win2K to help
protect your files in an internal, corporate environment. MS would have to
allow 3rd party vendors access to their unecryption algorithms in order to
do this. This would essentially negate any security that encryption might
offer you.

As a side note, the admins of CF-Talk list have disabled file attachment
capabilities because of a virus scare so any messages w/ attached files are
coming out screwy. Would you mind removing your atworklogo_very_small.gif &
Glacier Bkgrd.jpg files from your messages.

Thanks,

Rey...
Certified Allaire Instructor
Member of Team Allaire

"A browser's beauty, at its heart, is its usefulness as a *TOOL*."


- Original Message -
From: "Mike Amburn" <[EMAIL PROTECTED]>
To: "Cf-Talk" <[EMAIL PROTECTED]>
Sent: Wednesday, March 29, 2000 3:46 PM
Subject: CF4.5 doesn't support Win2000 file encryption?


> This is a multi-part message in MIME format.
>
> --=_NextPart_000__01BF9995.F72A13D0
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: 7bit
>
> Windows 2000 allows you to encrypt files. ColdFusion does not seem to
> support this, as I get the following error on any page that I encrypt:
>
> The template file exists, however, it either cannot be opened for reading,
> or it is encrypted and its data has been corrupted
>
> as soon as i unencrypt, all things are good to go.
>
> anyone heard anything about this? is allaire going to fix this in a
service
> patch?
>
> Mike Amburn
> Application Development
>
> --=_NextPart_000__01BF9995.F72A13D0
> Content-Type: image/gif;
> name="atworklogo_very_small.gif"
> Content-Transfer-Encoding: base64
> Content-ID: <994194320@29032000-1c68>
>
>
R0lGODlhhwAsAPcAAMDAwHNzc4SEhKWlpa2trdbW1ufn5+/v77Wtpf/nvffWnP/vzv/nte/WpXtr
>
Sv/WhPfv3vfWjO/OhPfGWvfGUvfOa++9OffWc+fGY+/GUue9Svfv1v/nnP/nlN7Gc97Ga+/GKffG
>
GOe1CPfGCP/GAJSMa+fWjFpSMf/WMee9GOe9APfGAN7Wrf/nc97GUv/eQufGKf/3xv/nUu/WSt7G
>
Of/ve9bGSu/npefWQt7OOf/3nP/3jP/3e//3Y6WlnM7Ovf//zv//xu/vra2te///td7elPf/vd7n
>
pdbn1qW9tWN7c87W1rW9vUpSUnuMjDFCQuf3/6W1vYyltb3Gzpylrd7v/4SMlGNrc0pSWtbe55Sc
>
pVJaY9bn/zFCWhAhOb3O56W1zmNzjL3G1pyltXuElFpjczlCUsbO3qWtvYSMnJytzjlKaxAhQhgx
>
YwgYOdbe787W57W9zq21xoyUpXN7jGtzhHOErWNznBApawgYQgghY73G3nuEnFpje5Sl1jlKezFC
>
cxgpWhAhUsbO56WtxpSctYyUrWNrhFJac0pSa2t7rWNzpSkxSkpajFJjnCk5axAhWggYSgAQQpyl
>
xoyc1oSUzjlCYzFChBghQhgpawAQStbe/7W93q211r3G73N7nGNrjFJae1pjjHOEzjE5WikxUiEp
>
Sik5exAYORAhawgYWoyUvWtznEpSe0JKcyExexAYQhgpewgQOcbO/62156Wt3pSczoSMvXuEtWNr
>
nDlCezE5ayEpWhghUrW994yUzoSMxkpSjCkxayEpYxAYUkJKjCkxcykxhCEpcyEpexAYWhAYYwgQ
>
Wufn787O1rW1vaWlrZycpdbW597e78bG1r29zpycrdbW72tre97e/4yMpb293lJSY7W13sbG94SE
>
pb2973t7nGtrjISEtSEhMTExSmNjpSEhQjExYzExawgIIca9xmtja/fn7wAA
>
ACH5BAEALACHACwA
>
QAj/AAEIHEiwoMGDCBMqXMiwocOHECNKLHigWho02yYqvDaslxaNIEO+OWXMi6kkY9oYCwSoChSC
>
tgJlWjamILheMxFVEWin1zA8vCC1eZRFYCGhmA4BsMPMmKBHhgYRLBBtDaY2gsIIFCCoVxdpBBcJ
>
aiPMG4BBXjJl+ghACjNkqAq1C6nQTiRjy0qFqtMnVJ8+ZUKRSnXMFCiBtQQtw0MF4RxNxpAdcxOK
>
oBQ3bTLFitUl20Bs6kixa0KIS0FPgIY9yhPmJRlVeLpsAhBOVi9BtQiCK5UJjyGBZCQN4+WHLsgD
>
KlbAsMDBiEQgQHRwaFEhQwYDCw1MmXaGyZmEU5ox/0TyA3vCAg7FxDHOvr17hQecERiw7oBCJAbm
>
vt/fEMqeOdgkws0VZFAhxxnTAGAfANPAEccY34SCSiTDGAMMfxgWxIkuyhijVhtRDATFGLZMMskq
>
haA4iRSTVHEIMcMo00hB2xgjDB6CLFKQL714aEYnBNGyiiKiNJKLId14BgAddAg0hSGrmGgiIZ1I
>
VRCUwCxRUCeTkCEFEhk2EskpmdgBABRo5oJMMpAUI9AGEBRiSiCBWGPQNFYJ84gvjQTSCyOmkQEJ
>
HplQMsoy6ESCBgCtmJLJMGYpROYwbqYB2zC5gGLOH2xEEskTjQEADjqQBNLIbYEokqFAaDSBSCiJ
>
fP93kAw4lHBCGYlsoZ5ffYSIkBh9JIIIWwRdww43JzjQwA0sCAGBiGKE04clpZRiSR/hUGPQAK0g
>
UkeCAlFzSCgDOgPAGX2IEsozBYkjTiJ1oLeqQjeYYAMNKeSrb74wwIDBBxKYkMACxp3BjkB0aHGG
>
AHMkAsAS0kBjJzdvpGHIG30MEs41AByyxzdgfMMHAIawAkYhnXxzDSgrg7FNOIWA8gkYVzbZhxiD
>
pEHNFlnENy+GVVwDhjZ1FFOMLrukk84aruQyTiez/Sz1qllQQ4c4VshBkH4ONbMKOrwQ48TU+3VS
>
LSm8dKOgQ4ScA/Yu4EhTzRTyAjMMG4Ac9E0v6Jz/c4h5DE1jRhlku/eFJcS0gcxMeDBipSfo9NJL
>
OjDyogwvkaDzxhvFQKJWqABcww2MeuBhii0DNROKKcMQ881ZhxgjSRuQQKKKIIG00QYzyezyy0Bp
>
KNPGMMLY2EsebuRhiRoCcYIJMszUJFAnfUSShyucrFpFIjGasgpPdymzhmkDrWIK7dIT9A2dptwC
>
gDe89GKKHbWUEoseSmVjSS+88DJLJcoYRiCU8BKE8AESwpDEHQBghWW0oRSzIAguehGJUuzhLOcj
>
BiGqIIo8EAMQb5gXF/qwjEw8QhilYEOnMMELZOAhFqmogzTgZIte0M5OBunE+TLxCmTcZg4CMcAf
>
/2TSQ2RgojVLyUNmmpSQOQwvEouAwmsy8QdbhAIWqpkE+QQyi1K0AQ+d8AYgTCGJRoQwQ2noHy+C
>
gRAgDIEUpohck2rBCwGCziCLgIUwlGGJLxCEC4K6hIcQAAAjCIEIQmBCAEqhDqEEYhiQzEQbiBGI
>
UBBiIE5QBSTQwTEATAITiQpFJ3cjyUUJpBvoyIQyENHJwgEAAiRQgQeI8B4dSCcCDWCAK3cJEQpo
>
QAQiGEEIZNADDuggCMhMpg52UIMayGAGOaCBDVxgggY8yyEFcAY1yDCNZzTjDUsAFzW0lAQ6hPNc
>
0hjEGc8gKzrYaRrUANcZqGGIM0jvDHB4yTSuIf+rgVihDgDYAz8LmIV1TKUovNTIMxKRoCloAyxn
>
sMIYziCNOdhJolZQGB2ogYY4TMEaBbACGphAhTOkwUF1sKjVqiGHek4DDWg4gzWYAI2BEE0adYip
>
Fpwxh2fQbQwGTahQh0rU9kwjC0jAD+CKylSQVGMM4rCEKchxjnNAUhjCABsmYDEhUoRCa00N60GW
>
YIhgHcIQ1ChgQzbxCWNgLh1iEGtTpfGMOQhgG0qiCyvCNja5OoQa1agGuyKChj10Iq4CWQcB5CCN
>
bHhiDxc0SAGqcYbAQiRyU/BrQ8KBClNEAhOigMg1ygGLXmBiHAYJBSbyMAywDiQb6IAkKl7HEPv/
>

Re: CF4.5 doesn't support Win2000 file encryption?

2000-03-29 Thread Michael Dinowitz

Forgive me for asking, but if MS gives a new 'feature' that will effect CF,
Perl, Rebol and almost every non-MS scripting language, why would you think
it needs a fix from Allaire?
>
> Windows 2000 allows you to encrypt files. ColdFusion does not seem to
> support this, as I get the following error on any page that I encrypt:
>
> The template file exists, however, it either cannot be opened for reading,
> or it is encrypted and its data has been corrupted
>
> as soon as i unencrypt, all things are good to go.
>
> anyone heard anything about this? is allaire going to fix this in a
service
> patch?


--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit 
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a 
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.