Forum Discussion

Mohsen's avatar
Mohsen
Icon for Altostratus rankAltostratus
Jun 13, 2019

https for login page only

Hello,   I have special request for one of our websites where they want the login page to be https but once logged in they want everything after that to be http only. to me that translate to an i...
application delivery
BIG-IP
irule
iRules
  • Dario_Garrido's avatar
    Dario_Garrido
    Jun 13, 2019

    I strongly discourage you to do that. This type of communication is known as unsecure.

     

    Take into account this, if one user could steal the cookie from another user, he/she could access the web page like being the other user.

     

    Conclusion:

    - Totally HTTPS Communication = Great!

    - Partially HTTPS Communication = HTTP = Unsecure

     

    KR,

    Dario.

Mohsen's avatar
Mohsen
Icon for Altostratus rankAltostratus
Jun 13, 2019

I agree with you and will not do that.

 

Thanks a lot sir.

  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for MVP rankMVP
    Jun 13, 2019

    You are welcome Mohsen.

     

    I would appreciate if you mark my answer as "the best" or give me some upvote.