Enforcing https.

[Jens Jensen]

Hello gurus,

We have a site that need security upgrade to run over https.
We want people to be redirected to httpsursite when the type what the
know, httpursite.

Is this possible?
How?
mnay thanks
JJ

 

[Mark Rae]

Is this possible?
Yes.

How?

Several ways:

1) AFAIK, you can set it in IIS

2)

protected void Application_BeginRequest(Object sender, EventArgs e)
{
if (HttpContext.Current.Request.IsSecureConnection.Equals(false))
{
Response.Redirect("https://" + Request.ServerVariables["HTTP_HOST"]
+ HttpContext.Current.Request.RawUrl);
}
}

3)
http://www.codeproject.com/aspnet/WebPageSecurity_v2.asp?select=1095511&df=100&forumid=53615&exp=0

 

[Jens Jensen]

Hi Mark and thank you for your quick response.

solution 2) looks very elegant, but could you provide more detail on 1).

2) require a new build and upload which we cant afford right now due to
heavy load.


many thanks
JJ

 

[Mark Rae]

solution 2) looks very elegant, but could you provide more detail on 1).

http://www.google.co.uk/search?sour...GLG,GGLG:2006-28,GGLG:en&q=iis+https+redirect

 

[Jens Jensen]

http://www.google.co.uk/search?sour...GLG,GGLG:2006-28,GGLG:en&q=iis+https+redirect
Great great,
Many thanks
JJ