How to force response to ONLY https requests...
"Jay Riopelle" <[email protected]>
| Newsgroups | gmane.comp.web.webobjects.admin |
|---|---|
| Message-ID | <[email protected]> |
Hi all: I have a Mac OS X Server set up with SSL, and a deployed WO application - connecting through "https://..." works ok and transactions are secure, but the server is also responding to requests through "http://...". I have seen postings describing how to set the response from the WO app to always be "https", which is fine, but I would ideally like it if the app ONLY responded to https requests. It seems like a bit of a security hole if there is a possibility that a non-secure request can be made (I want to have secure data flow both ways, request and response, for stuff like login name and password, etc.). I would prefer to have the app only respond to secure requests. Anyone know how to make that happen (other than by blocking port 80)? I've tried setting -WOCGIAdaptorURL argument to "https://...", but that doesn't do it. Thanks, Jay Riopelle.