SSL redirect to non-SSL

15 Mar 2006 2:35 AM

Daniel Kaplan

Not sure if I am in the right group, but question.

If I am going from an SSL page to a non-SSL page (like after loggin on) is
there a way to get the browser to NOT give that "you are being redirected to
a non-secure page" ?

Thanks

15 Mar 2006 6:59 AM

Bernard Cheah [MVP]

I believe this is browse site issue. IIS will just redirect the request. it
is the browser that control the warning message.

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/

Show quoteHide quote

"Daniel Kaplan" <NoSPam@NoSpam.com> wrote in message
news:1142390142.647162@nntp.acecape.com...
> Not sure if I am in the right group, but question.
>
> If I am going from an SSL page to a non-SSL page (like after loggin on) is
> there a way to get the browser to NOT give that "you are being redirected
> to
> a non-secure page" ?
>
> Thanks
>
>
>

15 Mar 2006 11:53 AM

David Wang [Msft]

IIS cannot control browser configuration. If it could, that would be a
security vulnerability since a malicious website can just make browser
insecure and use it to hack the user.

Since you must make the browser go from HTTPS to HTTP, the browser will
observe the change, and you are complete up to browser configuration for
such a change. Nothing the webserver can do about it.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

Show quoteHide quote

"Daniel Kaplan" <NoSPam@NoSpam.com> wrote in message
news:1142390142.647162@nntp.acecape.com...
> Not sure if I am in the right group, but question.
>
> If I am going from an SSL page to a non-SSL page (like after loggin on) is
> there a way to get the browser to NOT give that "you are being redirected
> to
> a non-secure page" ?
>
> Thanks
>
>
>