Difference between Require SSL and using URL Rewrite in IIS -
is there improved security web applications if use "require ssl" in ssl setting section of iis? planning on creating url rewrite rule.
"require ssl" cause 403.4 forbidden
response if try access site using http://example.com
. won't automatically redirect https://
url.
this may confusing users if you're not linking in way https://example.com
ssl'd url.
if want users able randomly hit site using plain http://
, redirect them ssl'd url you're better off leaving "require ssl" turned off , rewrite.
Comments
Post a Comment