Timeline for Is a forced rewrite from http to https secure? What does SSLRequireSSL add?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 24, 2018 at 6:23 | comment | added | anthony | The biggest problem I have with using a Rewrite for setting up a SSL-only area of a server, is that it does not work when used with authentication. For example adding this to a ".htaccess" file and settup you Basic Authentication, does not work. The authentication happens BEFORE the user is redirected! The only way I have found to do it properly is to restrict the redirect to a HTTP virtualhost and the authentication to the HTTPS virtual host. You can do it together in the same virtual host, or even the same ".htaccess" file. Arrrggghhh.... | |
| Jan 19, 2016 at 22:29 | comment | added | Erica Kane | Be aware that REQUEST_URI does not include a query string, if one exists. If you go this route use another matching pattern. | |
| Oct 19, 2012 at 15:02 | answer | added | Bruno | timeline score: 4 | |
| Oct 19, 2012 at 12:17 | vote | accept | markus-tharkun | ||
| Oct 19, 2012 at 11:41 | answer | added | bobince | timeline score: 8 | |
| Oct 19, 2012 at 10:10 | history | edited | markus-tharkun | CC BY-SA 3.0 |
added 76 characters in body
|
| Oct 19, 2012 at 10:04 | history | edited | markus-tharkun | CC BY-SA 3.0 |
added 76 characters in body
|
| Oct 19, 2012 at 9:32 | answer | added | sourcejedi | timeline score: 3 | |
| Oct 18, 2012 at 22:48 | history | asked | markus-tharkun | CC BY-SA 3.0 |