Wierd https/http problems

[E]

I have a https login page with C# code FormsAuthentication. After logging
in, my https pages recognize that I'm logged in. My http pages do not. It's
as if it's considering these pages under a different domain. Am I going to
have to make my entire site https? Any help/guidance is appreciated.

Thanks,
E

 

[Peter Rilling]

Sounds like you are hardcoding http in your site. If you use relative URLs,
it should not matter what protocol the user uses.

 

[E]

I was doing relative links, but as soon as I started using some https pages
the links broke. I had to start hardcoding the absolute links
"https://www.site.com/page1.aspx" and "http://www.site.com/page2.htm". It
was acting like if https was at the front it was a different site. i.e.
https//www.site.com is a different site than http://www.site.com...

 

[neilmcguigan]

are you using the secure attribute in the forms tag? if so auth cookie
will only be transmitted over https.