Forum Discussion
Jeremy__DeVoll_
Nimbostratus
NimbostratusSSL and partial page encryption
encryption/decryption occur on the F5; however our Dev team has two requirements for encryption:
I. Full page encryption.
II. Partial page encryption (specific form fields). ...
Jeremy__DeVoll_Nimbostratus
NimbostratusOK,
So it looks like it's possible. This leads me to the next question; is it prudent? It seems that it would be easier to simply force client requests into HTTPS for specific URLS, (e.g. login pages or sign up pages etc.) and just allow everything on that page to be encrypted. Is there anything to be gained by doing partial page encryption if the SSL offloading is occurring on the BigIP. In running through some cursory thought experiments I don't see any advantages.
Your thoughts?
Thanks much.
