Enforcing https.

[Jens Jensen]

Hello gurus,

We have a site that need security upgrade to run over https.
We want people to be redirected to https:oursite when the type what the
know, http:oursite.

Is this possible?
How?
mnay thanks
JJ

[Mark Rae]

"Jens Jensen" <[e-mail] in message
news:uH******************@TK2MSFTNGP04.phx.gbl...

Is this possible?

Yes.

How?

Several ways:

1) AFAIK, you can set it in IIS

2)

protected void Application_BeginRequest(Object sender, EventArgs e)
{
if (HttpContext.Current.Request.IsSecureConnection.Eq uals(false))
{
Response.Redirect("https://" + Request.ServerVariables["HTTP_HOST"]
+ HttpContext.Current.Request.RawUrl);
}
}

3)
http://www.codeproject.com/aspnet/We...id=53615&exp=0

[Jens Jensen]

Hi Mark and thank you for your quick response.

solution 2) looks very elegant, but could you provide more detail on 1).

2) require a new build and upload which we cant afford right now due to
heavy load.
many thanks
JJ

[Mark Rae]

"Jens Jensen" <[e-mail] in message
news:eg**************@TK2MSFTNGP03.phx.gbl...

solution 2) looks very elegant, but could you provide more detail on 1).

http://www.google.co.uk/search?sourc...https+redirect

[Jens Jensen]

http://www.google.co.uk/search?sourc...https+redirect

>

Great great,
Many thanks
JJ