All geek questions in one place

Limiting traffic to the SSL version of the page only

We have an external service that is currently available through HTTP (port 80, not SSL) and https (port 443, SSL).

What is the best way to limit the connection to only an https address? This is what we can do using IIS, or it needs to be done using code.

Additional information: The usual ASP.NET web service (.asmx) running on IIS on a Windows 2003 server. The service is built on C # on .NET 3.5.

+4
source share
3 answers

Greg Point Only 1. IIS Manager> Site Properties> Directory Security> Secure Communications> Require Secure Channel (SSL)

+3
source
  • Require SSL in the application
  • On the custom error page for 403, redirects the browser to the incoming URL, changing http to https along the way.

Note. Open port 80 for this - or there will be no server to listen to requests for redirection.

+5
source

Is only the absence of any connections on port 80 an option? I am a complete noob web server, so I don’t know if the server can work without an insecure listening port, but if the server can only work with listening on port 443, which would seem to be the easiest option.

Another option would be to redirect from an insecure port to a secure one.

0
source

Source: https://habr.com/ru/post/1276456/

More articles:


All Articles