How to force response to ONLY https requests...

"Jay Riopelle" <[email protected]>
Newsgroups gmane.comp.web.webobjects.admin
Message-ID <[email protected]>
Hi all:

I have a Mac OS X Server set up with SSL, and a deployed WO application - connecting through "https://..." 
works ok and transactions are secure, but the server is also responding to requests through "http://...".  I have 
seen postings describing how to set the response from the WO app to always be "https", which is fine, but I 
would ideally like it if the app ONLY responded to https requests.  

It seems like a bit of a security hole if there is a possibility that a non-secure request can be made (I want to 
have secure data flow both ways, request and response, for stuff like login name and password, etc.).  I  would 
prefer to have the app only respond to secure requests.  

Anyone know how to make that happen (other than by blocking port 80)?  I've tried setting -WOCGIAdaptorURL 
argument to "https://...", but that doesn't do it.

Thanks,
Jay Riopelle.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.