Forcing SSL Gracefully on a Site
Posted by: Paul Litwins Blog,
on 05 Mar 2008 |
View original | Bookmarked: 0 time(s)
It's certainly easy to setup a site to require SSL. Just use IIS Manager and check the Require secure channel (SSL) checkbox on the Authentication and access control dialog on the Directory Security tab.The problem with this, is what happens when someone hits your site using HTTP instead of HTTPS. They get a nasty error message that starts with:The page must be viewed over a secure channelThe page you are trying to access is secured with Secure Sockets Layer (SSL). While some...