Skip to main content
Rewording changed meaning, reverting it back
Source Link
Ilya Chernomordik
  • 2.3k
  • 1
  • 27
  • 41

I have an API that I want to be accessible only by HTTPS. I know I can use URL-rewrite to force a redirect, but don't want to install additional modules. I was wondering whether only providing an HTTPS binding would be a secure solution as opposed to offering(in a way that HTTP connectionsconnection would not be allowed).

enter image description here

Is it possible to somehow trick the server into accepting HTTP request with this kind of setup?

I have an API that I want to be accessible only by HTTPS. I know I can use URL-rewrite to force a redirect, but don't want to install additional modules. I was wondering whether only providing an HTTPS binding would be a secure solution as opposed to offering HTTP connections.

enter image description here

Is it possible to somehow trick the server into accepting HTTP request with this kind of setup?

I have an API that I want to be accessible only by HTTPS. I know I can use URL-rewrite to force a redirect, but don't want to install additional modules. I was wondering whether only providing an HTTPS binding would be a secure solution (in a way that HTTP connection would not be allowed).

enter image description here

Is it possible to somehow trick the server into accepting HTTP request with this kind of setup?

reworded question
Source Link
DKNUCKLES
  • 9.2k
  • 2
  • 39
  • 50

I have an API that I want to be accessible only by httpsHTTPS. I know I kancan use URL-rewrite to makeforce a redirect, but would likedon't want to not install additional modules. I was thinking is itwondering whether only providing an HTTPS binding would be a secure solution (in a way that it will not allow http connections)as opposed to provide https only bindings?offering HTTP connections.

enter image description here

Is it possible to somehow trick the server into accepting HTTP request with this kind of setup?

I have an API that I want to be accessible only by https. I know I kan use URL-rewrite to make a redirect, but would like to not install additional modules. I was thinking is it secure solution (in a way that it will not allow http connections) to provide https only bindings?

enter image description here

Is it possible to somehow trick the server into accepting HTTP request with this kind of setup?

I have an API that I want to be accessible only by HTTPS. I know I can use URL-rewrite to force a redirect, but don't want to install additional modules. I was wondering whether only providing an HTTPS binding would be a secure solution as opposed to offering HTTP connections.

enter image description here

Is it possible to somehow trick the server into accepting HTTP request with this kind of setup?

Source Link
Ilya Chernomordik
  • 2.3k
  • 1
  • 27
  • 41

Is it secure to have only https binding in IIS?

I have an API that I want to be accessible only by https. I know I kan use URL-rewrite to make a redirect, but would like to not install additional modules. I was thinking is it secure solution (in a way that it will not allow http connections) to provide https only bindings?

enter image description here

Is it possible to somehow trick the server into accepting HTTP request with this kind of setup?