[sqwebmail] Re: disable HTTP/allow only HTTPS

[George Shaunfield]

Jason Murray writes: 

As you can see, I want my users to connect/authenticate via HTTPS; I'd
like
to exclude the possibility of connecting/authenticating via HTTP.
However,
this same system is running a mission-important (not critical, but
important) HTTP server, so the answer is not as simple as just disabling
HTTP on my server.  Is there a way to get sqwebmail to ignore HTTP
requests
but answer HTTPS requests?
Read the document 'INSTALL', see option --enable-https 

This makes all the embedded links in the page https; so even if they go to
the login page nonsecure, as soon as they click the login button, all the
pages will be secure.
Thank you Brian.  I had read INSTALL and used the --enable-https.  I
apparently did not understand the full power of the option, though; it seems
that it was already doing what I wanted (e.g. forcing better password
security by using HTTPS always) without me knowing it!  Sorry for wasting
the list's time on this one :-(. 

Cheers,
Jason 

 




Jason, I believe I remember there is also an option noted in INSTALL to 
force https for the logon page only. Can be useful if you want the more 
secure logon, but not the performance hit for the rest of the session. 

George