HTTP -> HTTPS redirect described in K26312346 failed pentest scan
I recently had a pentest performed against a virtual server and the implementation I chose for HTTP to HTTPS redirection failed the audit. I had implemented the HTTP to HTTPS policy described in K26...