Difference between Require SSL and using URL Rewrite in IIS -


is there improved security web applications if use "require ssl" in ssl setting section of iis? planning on creating url rewrite rule.

"require ssl" cause 403.4 forbidden response if try access site using http://example.com. won't automatically redirect https:// url.

this may confusing users if you're not linking in way https://example.com ssl'd url.

if want users able randomly hit site using plain http:// , redirect them ssl'd url you're better off leaving "require ssl" turned off , rewrite.


Comments

Popular posts from this blog

php - failed to open stream: HTTP request failed! HTTP/1.0 400 Bad Request -

java - How to filter a backspace keyboard input -

java - Show Soft Keyboard when EditText Appears -