[OpenID] Selectively Redirecting OpenID Traffic To HTTPS

Trevor Johns trevor at tjohns.net
Fri Jan 11 11:57:01 UTC 2008


According to the OpenID spec, HTTPS identifiers are recommended over  
HTTP. Since the default scheme for a URL identifier is HTTP, the spec  
also recommends creating a redirect from the HTTP version of a URL to  
the HTTPS version of a URL when possible.

While creating this redirect isn't itself a problem, I don't want to  
send visitors to the HTTPS version of my site unless necessary. Is  
there any way to selectively redirect OpenID traffic to HTTPS without  
affecting normal traffic?

-- 
Trevor Johns
http://tjohns.net




More information about the general mailing list