security - HTTPS downloads/uploads -
my website accessible through https, provides secure connection user has fill in sensible details.
does security extend downloads , uploads done through website? example. provide simple "browse" button upload file, or link download file hosted on website, download/upload secure well?
thanks
let me explain things first.
ssl layer or connection., whichever data being sent/received website in packets , encrypted, whilst prevents "man-in-the-middle attack".[good news..right ? :-)]
but .. per request no ssl not ensure security when regards uploads/downloads.
you need add exception file types [mime] letting other (end-users) upload server [here, ssl has no work here]. you have set these limitations on coding part., if these things not handled properly, hacker may upload shell script on upload section , can gain root access server , can't blame on ssl.