redirect from https to http w/o security warning

[Guest]

I'm sending users to a secure page https to fill out a registration form.
When they're done I show a thank you page. I need to return the user to http
mode after filling out the form.

If I use response.redirect I get a security warning when transitioning from
https to http. Is there an accepted way to avoid having the user see this?

Thanks.

 

[Swanand Mokashi]

Have you tried using Server.transfer instead? that way the url may remain
the same and you will not have the issue.


--
Swanand Mokashi
Microsoft Certified Solution Developer (.NET) - Early Achiever
Microsoft Certified Application Developer (.NET)

http://www.dotnetgenerics.com/
DotNetGenerics.com -- anything and everything about Microsoft .NET
technology ...

http://www.swanandmokashi.com/
http://www.swanandmokashi.com/HomePage/WebServices/
Home of the Stock Quotes, Quote of the day and Horoscope web services

 

[Guest]

No that will only delay the ineviteable, as they can choose other pages from
the main navigation which don't use transfer or redirect.

 

[Swanand Mokashi]

Ok -- I thought you just needed it for this page.

The warning message when you move from https to http is by design on the
browser. You don't want to override that behavior

--
Swanand Mokashi
Microsoft Certified Solution Developer (.NET) - Early Achiever
Microsoft Certified Application Developer (.NET)

http://www.dotnetgenerics.com/
DotNetGenerics.com -- anything and everything about Microsoft .NET
technology ...

http://www.swanandmokashi.com/
http://www.swanandmokashi.com/HomePage/WebServices/
Home of the Stock Quotes, Quote of the day and Horoscope web services

 

[Jeff Dillon]

I've seen many websites that allow you to go from https to http without the
popup.

 

[Juan T. Llibre]

That's because they don't include both secure and non-secure items in the same page.

The warning is only sent when both secure
and non-secure items are included in the same page.

 

[april198474]

redirect https to http without warning

Should do for https to http
Quote:RewriteEngine On
RewriteCond %{SERVER_PORT} !^80$
RewriteRule ^.*$ http: //%{SERVER_NAME}%{REQUEST_URI} [L,R]

But keep in mind that anyway all users will get the cert warning if it does not fit a known CA, or it is invalid, or it does not fit the hostname etc. anyway. Only _after_ establishing the ssl conn the rewrite request will be processed.

Also this config needs to be done for every user (afaik you can not set those rewrite rules for all vhosts from a global base?!)



__________________________

April198474

Free chat software for you