Question SSL cert

[IBMJunkman]

Do I have to do anything in my web code to use a SSL cert? Is it enough just to tell IIS where the cert is and that is all?

 

[igor_kavinski]

This is the only thing you may want to worry about regarding code: https://owasp.org/www-community/controls/SecureCookieAttribute

 

[IBMJunkman]

Thanks. I will check the code but I don’t think my site uses cookies.

This is the only thing you may want to worry about regarding code: https://owasp.org/www-community/controls/SecureCookieAttribute

 

[IBMJunkman]

Added a certificate from SSLs.com to my site. No problems.

 

[Red Squirrel]

If you have any code that uses full path, make sure to update it to use https. Also some browsers will act weird if there are non http assets on the site, so if your site is linking to other servers that are not https (ex: image links that users can add themselves). Consider self hosting stuff like that.

 

[IBMJunkman]

If you have any code that uses full path, make sure to update it to use https. Also some browsers will act weird if there are non http assets on the site, so if your site is linking to other servers that are not https (ex: image links that users can add themselves). Consider self hosting stuff like that.

All my pages are working right. But maybe because of something I found. I have a link to a http external site at Columbia.edu. It fails with a 404. But I noticed that no matter what browser I use on my iPad they all returned a 404 for that site. The browsers appeared to change the http to https. I managed to change the behavior of the Brave browser. It gets me to the correct http site. And to the correct pages on my site even though I have not modified my internal links. I think that is necause I have Plesk set up to return https for a http request. I will check my internal links anyway.

Columbia admits they have a problem and are working on it.