Ensuring https on IIS webpages

[Steven Espinoza]

Hi Heather,
Looks like I am going down an acceptable path.  Thank you for the feedback and the link.


-          Steve



From: Web technologies in libraries [mailto:WEB4LIB at LISTSERV.ND.EDU] On Behalf Of Klish, Heather J
Sent: Monday, June 03, 2013 6:29 PM
To: WEB4LIB at LISTSERV.ND.EDU
Subject: Re: [WEB4LIB] Ensuring https on IIS webpages

We used something similar to this on IIS 6 with ILLiad:

http://www.thenetworkadministrator.net/index.php/2011/01/automatically-redirect-http-requests-to-https-iis-6/

There might be other ways as well.

Heather

- - - - - - - - - - - - - - - - -
Heather Klish
Systems Librarian
University Library Technology
heather.klish at tufts.edu<mailto:heather.klish at tufts.edu>
617.627.5853

From: Web technologies in libraries [mailto:WEB4LIB at LISTSERV.ND.EDU] On Behalf Of Steven Espinoza
Sent: Monday, June 03, 2013 8:30 PM
To: WEB4LIB at LISTSERV.ND.EDU<mailto:WEB4LIB at LISTSERV.ND.EDU>
Subject: [WEB4LIB] Ensuring https on IIS webpages

Hi all,
New to the list...and new to my topic:  ensuring https on web forms.

We recently added Illiad Institutional Lending which has its set of pages for login, registration and request forms.

I want to ensure https is used (in those rare occasions that someone types in the url using http:) but I am not sure of best practices.

In IIS 6, I found in Properties that Directory Security could be set to "Require secure channel (SSL)".  I have activated it on the Lending folder and it seems to work well.

Any http:// prefixed url to a page within this folder returns a 403.4 error page and indicates that the page must be viewed over a secure channel.  It includes the suggestion to try "https://".

As mentioned, it seems to work well, but I just don't know if I have done the best thing, or misused this security setting?  Is there a better or best practices way?

Thanks in advance.

Steven R. Espinoza

California State University San Marcos
Kellogg Library - Systems
San Marcos, CA 92096

e: espinoza at csusm.edu<mailto:espinoza at csusm.edu>
w: 760-750-4361
c: 760-801-5537


============================

To unsubscribe: http://bit.ly/web4lib

Web4Lib Web Site: http://web4lib.org/

2013-06-03
============================

To unsubscribe: http://bit.ly/web4lib

Web4Lib Web Site: http://web4lib.org/

2013-06-03

============================

To unsubscribe: http://bit.ly/web4lib

Web4Lib Web Site: http://web4lib.org/

2013-06-04
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listserv.nd.edu/pipermail/web4lib/attachments/20130604/86e302ad/attachment.htm>