Security Basics mailing list archives

Re: force https


From: "Sean M. Duckett" <sean () cyberclone net>
Date: Tue, 12 Jul 2005 10:44:37 -0500

Leon wrote:
Hello,

would like to allow only https.  This is a more
relaxed company so it will be harder to enforce a
management policy (as in dont do this do this) so I
would like to enforce this through the use of
techonlogy.

I'm in a similar situation, but my solution is to configure my webserver (Apache2, in my case) to transparently redirect traffic.

From my apache2.conf:

<VirtualHost *:80>
        Redirect permanent / https://www.mydomain.com/
</VirtualHost>


I'm not sure how you'd translate that to IIS, but I'm sure you'll find it if you rtfm.

--smd.


Current thread: