I want to use some restriction with SSL for now my .htacess is
RewriteEngine On
RewriteCond %{HTTPS} !=on [OR]
RewriteCond %{THE_REQUEST} ^POST(.*)HTTP/(0\.9|1\.0)$ [NC,OR]
RewriteCond %{REQUEST_METHOD} ^(delete|head|trace|track) [NC,OR]
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}%{REQUEST_URI} [R,L]
Edit
There are a lot of requests I can coming as HTTP1.0 and those are the requests that are trying to play with my forms so I want to restrict those as I read in a blog "there is more room for mischief with HTTP 1.0, primarily because the protocol does not require a Host header. Thus, another strategy for dealing with unwanted POST requests (and other types of requests, for that matter) is to require the HTTP 1.1 protocol."
I want the url to be always use SSL and also want to restrict requests from HTTP < 1.1. Why I have tried to explain below, please ask more question if I will try to describe my problem in better way.
Conceptually I would also like to understand in current time which version HTTP requests we should expect and how we can keep the post requests to be as expected ( want to block attacks ) .