Forum Discussion
DaveC_53879
Nimbostratus
Nimbostratushttp redirect changes a post to a get
Hi,
I'm using a standard http to https redirect but it is changing a post transcation to a get.
Here's my rule. How do I do I leave the Post intact and still enforce SSL?
...
Arie
Altostratus
AltostratusI don't know the details of your situation, but it would seem that redirecting a POST to from HTTP to HTTPS would defeat the purpose of using SSL in the first place. If the user has already submitted the data (POST) it's already travelled out in the open (over port 80) and the data should be considered compromised.
If it is not possible to fix the page you could change the HTML as it travels through the LTM and swap out the URL on the page so the POST uses the secure protocol.