[This is preliminary documentation and subject to change]

# Security Ramifications for IIS Applications

Securing Web sites is a critical issue for Web developers. It is also one of the most potentially confusing. A secure system requires careful planning, and Web site administrators and programmers must have a clear understanding of the options for securing their site. In addition, they need to understand how all of the various security subsystems interact.

This section provides an overview of the security issues faced by ASP, component, and ISAPI developers. The basic principles of securing a Web site are covered in Security.

This section contains:

- Accessing Client Certificates with ASP: Describes the use of server-side scripts to access client certificates.
- Passing Security Context: Outlines the various security contexts that may play a part in request processing.
- Additional Security Considerations: Discusses the various issues surrounding security in IIS applications.

© 1997-2001 Microsoft Corporation. All rights reserved.