> How can I ensure that the all HTTP requests will be redirected to HTTP?
If you want a full solution, I recommend this library. It handles pattern-matching to ensure that secure pages must be HTTPS and not-secure pages should be HTTP (which can really save a lot of server-time). I especially like this one because it forces the switch-over via client-side redirects... this avoids those "you are swtiching from/to secure connection" warnings. http://www.codeproject.com/KB/web-security/WebPageSecurity_v2.aspx A lighter weight one (not reviewed): http://www.codeplex.com/forcehttps Marc -- "Your lack of planning DOES constitute an emergency on my part... so PLAN BETTER! " Marc C. Brooks http://musingmarc.blogspot.com =================================== This list is hosted by DevelopMentor� http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com