DEV Community

Discussion on: Should a new webapp run on both http and https protocols?

Collapse
 
itssimondev profile image
Simone Aronica

I was thinking of staying onto HTTP because of compatibility, but as I build the authentication I'm learning more and more that I should not use it. As example, when I send a password the password is encrypted in the database but unencrypted during the transport, so... What's the point anyways? So yeah I think I'll remove HTTP.

Collapse
 
katnel20 profile image
Katie Nelson

On my web server (IIS), there is a redirect setup on port 80 which forwards all requests to port 443. This way, if the user types http, they automatically get over to https.

Thread Thread
 
itssimondev profile image
Simone Aronica

That makes a lot of sense! Thanks for the advice!