Talk to me about the pros and cons of doing http &...
# cfml-generald
Dave Merrill
08/16/2022, 5:28 PMTalk to me about the pros and cons of doing http > http redirects in code vs in IIS.
IIS seems like fewer in-house moving parts, and applies to all file types, for better and worse.
b
bdw429s
08/16/2022, 5:30 PMI'd say it depends on the redirect, lol
bdw429s
08/16/2022, 5:31 PMIf you need to redirect based on
• application state
• DB values
• session values
then you're stuck with CF.
If you just have a general redirect like
• http -> https
• site.com -> www.site.com
then I'd totally do that in IIS to keep unnecessary load off the CF server.
bdw429s
08/16/2022, 5:31 PM@Dave Merrill
r
Rodney
08/16/2022, 5:33 PMI agree with Brad unless you want to capture site redirect data so you can nag users who are lazy updating bookmarks.
a
aliaspooryorik
08/16/2022, 6:11 PM
May I also throw this into the ring https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
b
bdw429s
08/16/2022, 6:14 PMYes, always do HTST headers from the web server as well as the initial HTTP -> HTTPS redirect as well
d
Dave Merrill
08/16/2022, 6:44 PMPretty much what I thought, there's no state or other variables involved, do it in IIS. We're already doing HTST headers too.
2 Views