[Xitami] http folder must differ from https folder - how?!

Pieter Hintjens xitami@lists.xitami.org
Sun, 14 Dec 2003 20:28:01 +0100


"Ferenc-Jan" <ferenc@avz.xs4all.nl> wrote:

> In other words: I want to serve from two subfolders in /webpages:
> /http & /https, Xitami chosing between the two, based on the protocol
> use by the client.

Xitami/Pro does not allow this separation per protocol, but it does 
let you do much the same thing using virtual hosts.  Since HTTPS is 
bound to an IP address, not a server name, use the default 
configuration for your secure information.  Then add a virtual host 
for your insecure data.

When people come in on the secure connection they will use the 
default configuration.  When people use the insecure connection they 
will use the virtual host configuration.

There is one flaw in this plan: if someone enters the IP address they 
will be sent to the secure data.  This may or may not be a problem 
for you, since HTTPS is not protecting your data so much as allowing 
your users be certain it is coming from you.

There may be other ways to do this, and there are certainly ways to 
make more complex access controls using scripts (which can check and 
switch the HTTP protocol between secure and insecure).

-
Pieter Hintjens
iMatix Corporation