On Thu, Oct 29, 2009 at 2:19 PM, Octavian Râsnita <orasnita@xxxxxxxxx> wrote: >> That's a rather odd requirement. Normally the requirement is to be >> redirected to https _before_ logging in. It is, after all, the login >> data, that you need to protect. >> > > Isn't OK if the login form uses an action="https://..." attribute? In that case you don't need the redirect the OP asked for. Krist -- krist.vanbesien@xxxxxxxxx krist@xxxxxxxxxxxxx Bremgarten b. Bern, Switzerland -- A: It reverses the normal flow of conversation. Q: What's wrong with top-posting? A: Top-posting. Q: What's the biggest scourge on plain text email discussions? --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx