Difference between Require SSL and using URL Rewrite in IIS -


is there improved security web applications if use "require ssl" in ssl setting section of iis? planning on creating url rewrite rule.

"require ssl" cause 403.4 forbidden response if try access site using http://example.com. won't automatically redirect https:// url.

this may confusing users if you're not linking in way https://example.com ssl'd url.

if want users able randomly hit site using plain http:// , redirect them ssl'd url you're better off leaving "require ssl" turned off , rewrite.


Comments

Popular posts from this blog

command line - Use qwinsta in PowerShell ISE -

java - Incorrect order of records in M-M relationship in hibernate -

Python website log in: BIG-IP can not find session information in the request -