mercredi 29 avril 2015

htaccess HTTPS only no redirect

I want to block port 80 (HTTP) completely and only allow HTTPS requests. I have found many examples of how to redirect from HTTP to HTTPS but I would prefer to display an error instead. I cannot block port 80 in my config file as my hosting provider does not allow me to modify these files. If possible, how can I achieve the same results with htaccess.

The reason for me wanting this on my api.domain.com is for added security after reading this article.

Quote from article...

Aside from abandoning HTTP Basic altogether there is an easy fix. close port 80 on your API host. This stops a connection being made dead in its tracks, preventing any credentials being sent in the clear

Aucun commentaire:

Enregistrer un commentaire