Https question

31 Jan 2009 12:57 PM

goundhog

I've just taken over a new site

I notice that we have a website that is supposed to be secure - for logon
purposes

when you connect to https://website name - you get an ssl connection

however if you can enter http://website name - you get to the same logon
page - but its just http - no SSL

Anyone got an ideal of why this may be and how I can disable the http
connection ?

1 Feb 2009 5:12 AM

Dan H

You have two options. If you just want users to not be able to access the
page oven an insecure channel, you can open IIS admin, right click on the
site/directory you want to require ssl on and click properties. You should
be able to select the directory security tab, then click the edit button and
select the box for "require ssl".
This will give users an error when they try to access the site without SSL.
Personally I'd have a page that automatically forwards them to the https
version of the page. Use live search to search for something like "redirect
http https iis" (without the quotes) for examples how to do this.

Good luck,
Dan H

Show quoteHide quote

"goundhog" wrote:

> I've just taken over a new site
>
> I notice that we have a website that is supposed to be secure - for logon
> purposes
>
> when you connect to https://website name - you get an ssl connection
>
> however if you can enter http://website name - you get to the same logon
> page - but its just http - no SSL
>
> Anyone got an ideal of why this may be and how I can disable the http
> connection ?
>