I have a site using F5 to provided CAC authentication. It’s a PHP server, I get these values from the SERVER data:
$_SERVER[‘SERVER_PROTOCOL’] = HTTP/1.1
$_SERVER['SERVER_PORT] = 80
As a user, when I navigate to the site I type HTTPS into the browser, but the site php server still sees it coming in on port 80. Im assuming the connection between the user and the F5 proxy is over HTTPS, but whats the connection between F5 and my server? Is that supposed to be HTTPS?
I guess what I’m wondering is… should I be concerned and looking into this deeper?