开发者

Forms Auth requireSSl and Https

If my login pages are https, does it matter if "requireSSl" is true in the forms tab of the web config?

开发者_Go百科

Currently I am redirecting pages with IIS to HTTPS. When I set requiressl it seems to cause problems.

Can someone put the two settings in perspective. thanks


if you set https at the server level then requireSsl does not matter (setting it on or off should not make any difference). After setting https required, set a redirect as mentioned in this article:

http://www.jppinto.com/2009/01/automatically-redirect-http-requests-to-https-on-iis-6/

==== reference http://msdn.microsoft.com/en-us/library/system.web.security.formsauthentication.requiressl.aspx

You can specify in the Web.config file for your ASP.NET application whether SSL (Secure Sockets Layer) is required to return the forms-authentication cookie to the server by setting the requireSSL attribute

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜