Question

We are planning to move our website to https, which currently running on only http only.
Web site is running on IIS7 in Windows 2008 server.

Do I need to update/modify any configuration settings in the website to make it work on HTTPS? Is it fine just installing certifictes?

Please tell if there are any setting needs to be updated/modified?

nRk

Answer 1

It depends on how you handle the linking of external assets inside your application.

If you use relative paths to reference internal assets and don’t link to any files/scripts hosted on other servers, then you should be fine.

If you use full paths to reference assets, for example:

<img src="http://foo.bar.my.site/image.png" />

Or reference external assets:

<script src="http://code.jquery.com/jquery-1.4.2.min.js"></script>

Then you are going to get errors in most browsers about mixing secure and non-secure content.