[Xitami] Forcing https.

[Thomas J. Hruska]

At 07:01 AM 7/10/01 +1200, you wrote:
>In message <5.0.2.1.0.20010626140940.0235b080@ccsun.tuke.sk>, Zdenko
=?iso-8859-1?Q?Roh=E1=E8?= writes:
>>My website is composed from some static pages and web applications.
>>I would like to use http protocol for static pages and secure https for
>>applications. But I was not able to figure out how to force using https
>>for defined directory.
>
>There isn't a way to do this at present (although it's a good idea,
>which has been suggested before).  Generally for most sites forcing
>HTTPS doesn't gain you very much other than avoiding the possibility of
>users accidentally sending things in plain text they might not want to
>do so.  However that's usually balanced against allowing users to do so
>if they're really not able to use HTTPS.

Apache uses HTTPS="on" as well as setting SSL environment information to
let CGI applications know that they are being run on a secure protocol.  I
think setting HTTPS="on" is enough for 99% of the CGIs being run out there.


           Thomas J. Hruska -- shinelight@crosswinds.net
Shining Light Productions -- "Meeting the needs of fellow programmers"
                  http://www.shininglightpro.com/